ICSA-21-040-04

icsaUScisa_csaf_ot

Siemens RUGGEDCOM ROX II

Advisory ansehen veröffentlicht 2021-02-09

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens’ operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-17007UShigh7.5—
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
CVE-2019-17006UScritical9.8OT erhöht—
In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the library did not perform a san…
CVE-2018-18508USmedium6.5—
In Network Security Services (NSS) before 3.36.7 and before 3.41.1, a malformed signature can cause a crash due to a null dereference, resulting in a Denial of Service.
CVE-2020-1763UShigh7.5—
An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan…
CVE-2019-11745UShigh8.8—
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur. This could have caused…
CVE-2018-12404USmedium5.9—
A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (96)

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX MX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1400

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1500

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1501

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1510

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1511

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX1512

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • MitigationRUGGEDCOM ROX RX5000

    Disable IPsec unless the feature is required in the network environment. Note that IPsec is disabled by default.

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX MX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1400

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1500

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1501

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1510

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1511

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX1512

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

  • BehobenRUGGEDCOM ROX RX5000

    Update to V2.14.0 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan