Siemens SENTRON
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-22044US | — | — | ||
A vulnerability has been identified in SENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75) (All versions). Affected devices expose an unused, unstable http service at port 8… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - CSAF Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - HTML Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - PDF Versionself
- SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module - TXT Versionself
- ICS Advisory ICSA-24-074-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-074-06 - Web Versionself
- Recommended Practicesexternal
Behebungen (2)
- MitigationSENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)
Restrict access to the Modbus-TCP network by blocking incoming connections to port 80/tcp, e.g. in a firewall
- Kein Fix verfügbarSENTRON 3KC ATC6 Expansion Module Ethernet (3KC9000-8TL75)
Currently no fix is available
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan