SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4
Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-26554US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntp… | ||||
| CVE-2023-26553US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack… | ||||
| CVE-2023-26552US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd… | ||||
references
External citations — patches, advisories, analysis.
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - CSAF Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - HTML Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - PDF Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - TXT Versionself
remediations (12)
- FixedSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - FixedSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan