ICSA-24-165-09

icsaUScisa_csaf_ot

Siemens SICAM AK3/BC/TM

Advisory ansehen veröffentlicht 2024-06-11

SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition. - SICAM AK3 device firmware- CPCX26 for CP-2016 - PCCX26 for CP-2019 - SICAM AK3, SICAM BC and SICAM TM device firmware- ETA4 and ETA5 for SM-2558 Siemens has released new firmware versions for the affected products and recommends to update to the latest versions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-31484US——
A vulnerability has been identified in CPC80 Central Processing/Communication (All versions < V16.41), CPCI85 Central Processing/Communication (All versions < V5.30), CPCX26 Centra…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • BehobenCPCX26 Central Processing/Communication

    Update to V06.02 or later version. The firmware CPCX26 V06.02 is present within “SICAM RTUs AK3 Package” V06.02

  • BehobenETA4 Ethernet Interface IEC60870-5-104

    Update to V10.46 or later version The firmware ETA4 V10.46 is present within “SICAM RTUs AK3 Package” V06.02

  • BehobenETA5 Ethernet Int. 1x100TX IEC61850 Ed.2

    Update to V03.27 or later version The firmware ETA5 V03.27 is present within “SICAM RTUs AK3 Package” V06.02

  • BehobenPCCX26 Ax 1703 PE, Contr, Communication Element

    Update to V06.05 or later version The firmware PCCX26 V06.05 is present within “SICAM RTUs AK3 Package” V06.02

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan