Siemens SIMATIC RTLS Gateways
SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-11896US | critical10.0 | Exploit | ||
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-647068: Ripple20 in SIMATIC RTLS Gateways - CSAF Versionself
- SSA-647068: Ripple20 in SIMATIC RTLS Gateways - HTML Versionself
- SSA-647068: Ripple20 in SIMATIC RTLS Gateways - PDF Versionself
- SSA-647068: Ripple20 in SIMATIC RTLS Gateways - TXT Versionself
- ICS Advisory ICSA-24-046-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-046-03 - Web Versionself
- Recommended Practicesexternal
Behebungen (10)
- Kein Fix geplantSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)
Currently no fix is planned
- Kein Fix geplantSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)
Currently no fix is planned
- Kein Fix geplantSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)
Currently no fix is planned
- Kein Fix geplantSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)
Currently no fix is planned
- Kein Fix geplantSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)
Currently no fix is planned
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33)
Implement Security recommendations according to the product manual
- WorkaroundSIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)
Implement Security recommendations according to the product manual
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan