ICSA-21-336-08

icsaUScisa_csaf_ot

Hitachi Energy RTU500 series

Advisory ansehen veröffentlicht 2021-12-02

Successful exploitation of these vulnerabilities could allow an attacker to eavesdrop on traffic, retrieve information from memory, or cause a denial-of-service condition.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-3517UShigh8.6—
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application li…
CVE-2020-1968USlow3.7—
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellma…
CVE-2020-24977USmedium6.5—
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (6)

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • MitigationRTU500 series CMU Firmware

    Do not directly connect to the Internet.

  • BehobenRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

  • BehobenRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

  • BehobenRTU500 series CMU Firmware

    RTU500 series CMU Firmware Version 11.*: This product version is end-of-life (EOL). Upgrade to a non-affected support version. See below for the current mitigation strategy.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan