SSA-647068: Ripple20 in SIMATIC RTLS Gateways
SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11896US | critical10.0 | Exploit | ||
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- No fix plannedSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)
Currently no fix is planned
- No fix plannedSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)
Currently no fix is planned
- No fix plannedSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)
Currently no fix is planned
- No fix plannedSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)
Currently no fix is planned
- No fix plannedSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)
Currently no fix is planned
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)
Implement Security recommendations according to the product manual
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan