Siemens SCALANCE W1750D Devices
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-0286US | high7.4 | — | ||
There is a type confusion vulnerability relating to X.400 address processing
inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but
the public structure def… | ||||
| CVE-2023-0215US | high7.5 | — | ||
The public API function BIO_new_NDEF is a helper function used for streaming
ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the
SMIME, CMS and PKCS7 st… | ||||
| CVE-2022-4450US | high7.5 | — | ||
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data.
If the function succeeds th… | ||||
| CVE-2022-4304US | medium5.9 | Exploit | ||
A timing based side channel exists in the OpenSSL RSA Decryption implementation
which could be sufficient to recover a plaintext across a network in a
Bleichenbacher style attack.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices - CSAF Versionself
- SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices - HTML Versionself
- SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices - PDF Versionself
- SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices - TXT Versionself
- ICS Advisory ICSA-23-075-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-075-04 - Web Versionself
- Recommended Practicesexternal
Behebungen (21)
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-4304: Disable the use of RSA ciphers in the web server configuration; note that RSA ciphers are disabled by default
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2022-4450: Do not import or configure certificate files in PEM format from untrusted sources
- MitigationSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
CVE-2023-0286: Disable CRL (certification revocation list) checking, if possible
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-4304: Disable the use of RSA ciphers in the web server configuration; note that RSA ciphers are disabled by default
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2022-4450: Do not import or configure certificate files in PEM format from untrusted sources
- MitigationSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
CVE-2023-0286: Disable CRL (certification revocation list) checking, if possible
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-4304: Disable the use of RSA ciphers in the web server configuration; note that RSA ciphers are disabled by default
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2022-4450: Do not import or configure certificate files in PEM format from untrusted sources
- MitigationSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
CVE-2023-0286: Disable CRL (certification revocation list) checking, if possible
- BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (JP) (6GK5750-2HX01-1AD0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (ROW) (6GK5750-2HX01-1AA0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
- BehobenSCALANCE W1750D (USA) (6GK5750-2HX01-1AB0)
Update to V8.10.0.9 or later version The update is available upon request from customer support
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan