Siemens SINUMERIK
A Denial-of-Service vulnerability found in SINUMERIK Controllers could allow an unauthenticated attacker with network access to the affected devices to cause system failure with total loss of availability. Siemens has released an update for the SINUMERIK 828D and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37199US | high7.5 | — | ||
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95). Affected devices don't process correctly certain special crafted packet… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers - CSAF Versionself
- SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers - PDF Versionself
- SSA-178380: Denial-of-Service Vulnerability in SINUMERIK Controllers - TXT Versionself
- ICS Advisory ICSA-21-287-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-287-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationSINUMERIK 808D
Restrict access to port 102/tcp to trusted systems e.g. with an external firewall
- MitigationSINUMERIK 828D
Restrict access to port 102/tcp to trusted systems e.g. with an external firewall
- Kein Fix verfügbarSINUMERIK 808D
Currently no remediation is available
- BehobenSINUMERIK 828D
Update to V4.95 or later version
- WorkaroundSINUMERIK 808D
Apply general workarounds.
- WorkaroundSINUMERIK 828D
Apply general workarounds.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan