Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-5391US | high7.5 | Exploit | ||
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a… | ||||
| CVE-2018-5390US | high7.5 | — | ||
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-377115: SegmentSmack in Linux IP-Stack based Industrial Devices - HTML Versionself
- ICS Advisory ICSA-20-105-05 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-105-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (41)
- BehobenRUGGEDCOM RM1224
Update to V6.1
- BehobenRUGGEDCOM RM1224
Update to V6.1
- BehobenRUGGEDCOM ROX II
Update to V2.13.3
- BehobenSCALANCE M-800 / S615
Update to V6.1
- BehobenSCALANCE M-800 / S615
Update to V6.1
- BehobenSCALANCE SC-600
Update to V2.0 or a later version
- BehobenSCALANCE SC-600
Update to V2.0 or a later version
- BehobenSCALANCE W1700 IEEE 802.11ac
Update to V2.0
- BehobenSCALANCE W1700 IEEE 802.11ac
Update to V2.0
- BehobenSCALANCE W700 IEEE 802.11a/b/g/n
Update to V6.4
- BehobenSCALANCE W700 IEEE 802.11a/b/g/n
Update to V6.4
- BehobenSIMATIC NET CP 1242-7
Update to V3.2
- BehobenSIMATIC NET CP 1242-7
Update to V3.2
- BehobenSIMATIC NET CP 1243-1 (incl.'SIPLUS variants)
Update to V3.2
- BehobenSIMATIC NET CP 1243-1 (incl.'SIPLUS variants)
Update to V3.2
- BehobenSIMATIC NET CP 1243-7 LTE EU
Update to V3.2
- BehobenSIMATIC NET CP 1243-7 LTE EU
Update to V3.2
- BehobenSIMATIC NET CP 1243-7 LTE US
Update to V3.2
- BehobenSIMATIC NET CP 1243-7 LTE US
Update to V3.2
- BehobenSIMATIC NET CP 1243-8 IRC
Update to V3.2
- BehobenSIMATIC NET CP 1243-8 IRC
Update to V3.2
- BehobenSIMATIC NET CP 1542SP-1
Update to V2.1
- BehobenSIMATIC NET CP 1542SP-1
Update to V2.1
- BehobenSIMATIC NET CP 1542SP-1 IRC (incl.'SIPLUS variants)
Update to V2.1
- BehobenSIMATIC NET CP 1542SP-1 IRC (incl.'SIPLUS variants)
Update to V2.1
- BehobenSIMATIC NET CP 1543-1 (incl.'SIPLUS variants)
Update to V2.2
- BehobenSIMATIC NET CP 1543-1 (incl.'SIPLUS variants)
Update to V2.2
- BehobenSIMATIC NET CP 1543SP-1 (incl.'SIPLUS variants)
Update to V2.1
- BehobenSIMATIC NET CP 1543SP-1 (incl.'SIPLUS variants)
Update to V2.1
- BehobenSIMATIC RF185C
Update to V1.3 or later version
- BehobenSIMATIC RF185C
Update to V1.3 or later version
- BehobenSIMATIC RF186C
Update to V1.3 or later version
- BehobenSIMATIC RF186C
Update to V1.3 or later version
- BehobenSIMATIC RF186CI
Update to V1.3 or later version
- BehobenSIMATIC RF186CI
Update to V1.3 or later version
- BehobenSIMATIC RF188C
Update to V1.3 or later version
- BehobenSIMATIC RF188C
Update to V1.3 or later version
- BehobenSIMATIC RF188CI
Update to V1.3 or later version
- BehobenSIMATIC RF188CI
Update to V1.3 or later version
- BehobenSINEMA Remote Connect Server
Update to V2.1 or later version
- BehobenSINEMA Remote Connect Server
Update to V2.1 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan