SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1
view advisory published 2024-06-11
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
01
describes (37)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-36558US | medium5.5 | — | ||
ASP.NET Core Security Feature Bypass Vulnerability | ||||
| CVE-2023-36038US | high7.5 | — | ||
ASP.NET Core Denial of Service Vulnerability | ||||
| CVE-2023-36049US | critical9.8 | — | ||
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | ||||
| CVE-2023-5678US | medium5.3 | — | ||
Issue summary: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the funct… | ||||
| CVE-2023-38171US | — | — | ||
Microsoft QUIC Denial of Service Vulnerability | ||||
| CVE-2023-36435US | — | — | ||
Microsoft QUIC Denial of Service Vulnerability | ||||
| CVE-2023-44487US | high7.5OT critical | KEV | ||
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through… | ||||
| CVE-2023-36799US | — | — | ||
.NET Core and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-36796US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36794US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36793US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-36792US | —OT elevated | — | ||
Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-39615US | medium6.5 | — | ||
Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a De… | ||||
| CVE-2023-38180US | —OT critical | KEV | ||
.NET and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-35391US | high7.5 | — | ||
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability | ||||
| CVE-2023-38178US | — | — | ||
.NET Core and Visual Studio Denial of Service Vulnerability | ||||
| CVE-2023-35390US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2023-3446US | medium5.3 | — | ||
Issue summary: Checking excessively long DH keys or parameters may be very slow.
Impact summary: Applications that use the functions DH_check(), DH_check_ex()
or EVP_PKEY_param_ch… | ||||
| CVE-2023-33170US | — | — | ||
ASP.NET and Visual Studio Security Feature Bypass Vulnerability | ||||
| CVE-2023-33127US | — | — | ||
.NET and Visual Studio Elevation of Privilege Vulnerability | ||||
showing 20 of 37
02
references
External citations — patches, advisories, analysis.
- SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 - CSAF Versionself
- SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 - HTML Versionself
- SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 - PDF Versionself
- SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1 - TXT Versionself
03
remediations (37)
- FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/ - FixedST7 ScadaConnect (6NH7997-5DA10-0AA0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109955597/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan