Siemens Industrial Products LLDP (Update D)
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-27827US | high7.5 | — | ||
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially… | ||||
| CVE-2015-8011US | critical9.8 | — | ||
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execut… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - PDF Versionself
- SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products - TXT Versionself
- ICS Advisory ICSA-21-194-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-194-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (68)
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC HMI Unified Comfort Panels
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIMATIC HMI Unified Comfort Panels
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSINUMERIK ONE MCP
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSINUMERIK ONE MCP
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.
- BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC HMI Unified Comfort Panels
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530 - BehobenSIMATIC HMI Unified Comfort Panels
Update to V17 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530 - BehobenSINUMERIK ONE MCP
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
- BehobenSINUMERIK ONE MCP
Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.
- BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773/ - BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan