Festo: Multiple vulnerabilities in Ethernet/IP Stack of SBRD-Q/SBOC-Q/SBOI-Q
The affected product families are cameras SBOC/SBOI and the Controller SBRD. The vulnerabilities are located within the Ethernet IP Stack from EIPStackGroup OpENer Ethernet/IP.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27500US | high7.5 | — | ||
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition. | ||||
| CVE-2021-27498US | high7.5 | — | ||
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition. | ||||
| CVE-2021-27482US | high7.5 | — | ||
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may allow the attacker to read arbitrary data. | ||||
| CVE-2021-27478US | high7.5 | — | ||
A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may cause a denial-of-service condition. | ||||
references
External citations — patches, advisories, analysis.
- FSA-202101: Festo: Multiple vulnerabilities in Ethernet/IP Stack of SBRD-Q/SBOC-Q/SBOI-Q - HTMLself
- CERT@VDE Security Advisoriesexternal
- For further security-related issues in Festo products please contact the Festo Product Security Incident Response Team (PSIRT)external
- FSA-202101: Festo: Multiple vulnerabilities in Ethernet/IP Stack of SBRD-Q/SBOC-Q/SBOI-Q - CSAFself
remediations (8)
- Mitigation
- Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet. - Deactivate EtherNet/IP in device settings if not used
- Mitigation
- Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet. - Deactivate EtherNet/IP in device settings if not used
- Mitigation
- Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet. - Deactivate EtherNet/IP in device settings if not used
- Mitigation
- Minimize network exposure for all control system devices and/or systems, and ensure that they are not accessible from the Internet. - Deactivate EtherNet/IP in device settings if not used
- No fix planned
There is no fix planned.
- No fix planned
There is no fix planned.
- No fix planned
There is no fix planned.
- No fix planned
There is no fix planned.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan