SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-22044US | — | — | ||
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 8… | ||||
references
External citations — patches, advisories, analysis.
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - CSAF Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - HTML Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - PDF Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - TXT Versionself
remediations (2)
- MitigationSENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)
Restrict access to the Modbus-TCP network by blocking incoming connections to port 80/tcp, e.g. in a firewall
- No fix availableSENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)
Currently no fix is available
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan