SSA-620338

csafDEsiemens_psirt

SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM

view advisory published 2024-06-11

SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition. - SICAM AK3 device firmware- CPCX26 for CP-2016 - PCCX26 for CP-2019 - SICAM AK3, SICAM BC and SICAM TM device firmware- ETA4 and ETA5 for SM-2558 Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-31484US——
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Centra…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • FixedCPCX26 Central Processing/Communication

    Update to V06.02 or later version. The firmware CPCX26 V06.02 is present within “SICAM RTUs AK3 Package” V06.02

  • FixedETA4 Ethernet Interface IEC60870-5-104

    Update to V10.46 or later version The firmware ETA4 V10.46 is present within “SICAM RTUs AK3 Package” V06.02

  • FixedETA5 Ethernet Int. 1x100TX IEC61850 Ed.2

    Update to V03.27 or later version The firmware ETA5 V03.27 is present within “SICAM RTUs AK3 Package” V06.02

  • FixedPCCX26 Ax 1703 PE, Contr, Communication Element

    Update to V06.05 or later version The firmware PCCX26 V06.05 is present within “SICAM RTUs AK3 Package” V06.02

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan