SSA-446545

csafDEsiemens_psirt

SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products

view advisory published 2024-09-10

An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-6387UShigh8.1Exploit
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationIndustrial Edge Management OS (IEM-OS)

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINAMICS IIoT module

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINEMA Remote Connect Server

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINUMERIK ONE

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • No fix plannedIndustrial Edge Management OS (IEM-OS)

    Currently no fix is planned

  • FixedSINAMICS IIoT module

    Update to V1.0 HF1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989288/
  • FixedSINEMA Remote Connect Server

    Update to V3.2 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109974084/
  • FixedSINUMERIK ONE

    Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan