SSA-244969

csafDEsiemens_psirt

SSA-244969: OpenSSL Vulnerability in Industrial Products

view advisory published 2022-02-08

OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not yet available. [0] https://www.openssl.org/news/secadv/20210824.txt

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-3712UShigh7.4Exploit
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont…
02

references

External citations — patches, advisories, analysis.

03

remediations (271)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan