Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED
For process data documentation purposes the laboratory washers, thermal disinfectors and washer-disinfectors can be integrated in a TCP/IP network by utilizing the affected communication module. The communication module is separate from the actual device control and uses a chipset from Digi International. The TCP / IP stack required for networking is implemented in this chipset with the help of a 3rd party library from Treck. External security researchers have identified several security holes in this library called Ripple20. The most critical vulnerability allows an external attacker to execute arbitrary code on the chip and thus also on the communication module. The above named communication module can be integrated into the following laboratory washers, thermal disinfectors and washer- disinfectors: - PG 8581 - PG 8582 - PG 8583 - PG 8583 CD - PG 8591 - PG 8582 CD - PG 8592 - PG 8593 - PG 8562
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-11914US | medium4.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read. | ||||
| CVE-2020-11913US | medium5.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | ||||
| CVE-2020-11912US | medium5.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. | ||||
| CVE-2020-11911US | medium5.3OT elevated | — | ||
The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control. | ||||
| CVE-2020-11910US | medium5.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. | ||||
| CVE-2020-11909US | medium5.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow. | ||||
| CVE-2020-11908US | medium4.3 | — | ||
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP. | ||||
| CVE-2020-11907US | medium6.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP. | ||||
| CVE-2020-11906US | medium6.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow. | ||||
| CVE-2020-11905US | medium6.5 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read. | ||||
| CVE-2020-11904US | high7.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write. | ||||
| CVE-2020-11903US | medium6.5 | — | ||
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read. | ||||
| CVE-2020-11902US | high7.3 | — | ||
The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. | ||||
| CVE-2020-11901US | critical9.0OT elevated | — | ||
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. | ||||
| CVE-2020-11900US | high8.2 | — | ||
The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. | ||||
| CVE-2020-11899US | medium5.4OT critical | KEV | ||
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | ||||
| CVE-2020-11898US | critical9.1 | Exploit | ||
The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak. | ||||
| CVE-2020-11897US | critical10.0 | — | ||
The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. | ||||
| CVE-2020-11896US | critical10.0 | Exploit | ||
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. | ||||
references
External citations — patches, advisories, analysis.
remediations (38)
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- MitigationFirmware <=1.9.x installed on Hardware XKM3000 L MED
The intended use of the devices and the networking functionalities do not require internet connection. Please operate the devices only in a secure local network to further reduce the risk.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
- FixedFirmware <=1.9.x installed on Hardware XKM3000 L MED
A security patch will be installed on the devices during regular maintenance and device requalification by the Miele customer service or authorized service partners.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan