Siemens SCALANCE W1750D, M800, S615, and RUGGEDCOM RM1224 (Update C)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2017-14491US | critical9.8 | Exploit | ||
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response. | ||||
| CVE-2017-14496US | high7.5 | Exploit | ||
Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a… | ||||
| CVE-2017-14495US | high7.5 | Exploit | ||
Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption)… | ||||
| CVE-2017-13704US | high7.5 | — | ||
In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. As it is an unsigned value, memset ends… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-689071: DNSMasq Vulnerabilities in SCALANCE W1750D, SCALANCE M-800 / S615 and RUGGEDCOM RM1224 - HTML Versionself
- ICS Advisory ICSA-17-332-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-17-332-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (24)
- MitigationRUGGEDCOM RM1224
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationRUGGEDCOM RM1224
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationRUGGEDCOM RM1224
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationRUGGEDCOM RM1224
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationSCALANCE M-800 / S615
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationSCALANCE M-800 / S615
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationSCALANCE M-800 / S615
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationSCALANCE M-800 / S615
SCALANCE M-800 / S615 and RUGGEDCOM RM1224: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox 'Enable DNS Proxy'), and configure the connected devices in the internal network to use a different DNS server
- MitigationSCALANCE W1750D
SCALANCE W1750D: If 'OpenDNS', 'Captive Portal' or 'URL redirection' functionality is not used, deploy firewall rules in the device configuration to block incoming access to port 53/UDP
- MitigationSCALANCE W1750D
SCALANCE W1750D: If 'OpenDNS', 'Captive Portal' or 'URL redirection' functionality is not used, deploy firewall rules in the device configuration to block incoming access to port 53/UDP
- MitigationSCALANCE W1750D
SCALANCE W1750D: If 'OpenDNS', 'Captive Portal' or 'URL redirection' functionality is not used, deploy firewall rules in the device configuration to block incoming access to port 53/UDP
- MitigationSCALANCE W1750D
SCALANCE W1750D: If 'OpenDNS', 'Captive Portal' or 'URL redirection' functionality is not used, deploy firewall rules in the device configuration to block incoming access to port 53/UDP
- BehobenRUGGEDCOM RM1224
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenRUGGEDCOM RM1224
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenRUGGEDCOM RM1224
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenRUGGEDCOM RM1224
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenSCALANCE M-800 / S615
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenSCALANCE M-800 / S615
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenSCALANCE M-800 / S615
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenSCALANCE M-800 / S615
Update to V5.0 or later version https://support.industry.siemens.com/cs/ww/en/view/109757544
- BehobenSCALANCE W1750D
Update to V6.5.1.5 or later version https://support.industry.siemens.com/cs/ww/en/view/109778052
- BehobenSCALANCE W1750D
Update to V6.5.1.5 or later version https://support.industry.siemens.com/cs/ww/en/view/109778052
- BehobenSCALANCE W1750D
Update to V6.5.1.5 or later version https://support.industry.siemens.com/cs/ww/en/view/109778052
- BehobenSCALANCE W1750D
Update to V6.5.1.5 or later version https://support.industry.siemens.com/cs/ww/en/view/109778052
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan