Siemens Web Server of SCALANCE X200 (Update A)
Several SCALANCE X-200 switches contain buffer overflow vulnerabilities in the web server. In the most severe case an attacker could potentially remotely execute code. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25669US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SC… | ||||
| CVE-2021-25668US | critical9.8 | — | ||
A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SC… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - CSAF Versionself
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - PDF Versionself
- SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200 - TXT Versionself
- ICS Advisory ICSA-21-103-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-103-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (116)
- MitigationSCALANCE X200-4P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X200-4P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X201-3P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X202-2P IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204 IRT PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2FM
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2FM
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2LD TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X204-2TS
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X206-1LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X208PRO
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X212-2LD
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X216
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X216
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X224
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE X224
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF201-3P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF202-2P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF202-2P IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204 IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2 (incl. SIPLUS NET variant)
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2BA IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF204-2BA IRT
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF206-1
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF208
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- MitigationSCALANCE XF208
Limit network traffic of web servers of SCALANCE X switches to trusted connections by firewall rules (port 443/tcp and 80/tcp).
- BehobenSCALANCE X200-4P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X200-4P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X201-3P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X201-3P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2P IRT (incl. SIPLUS NET variant)
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X202-2P IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X204 IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X204 IRT PRO
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE X204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2FM
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2FM
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2LD TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X204-2TS
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X206-1LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X206-1LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208PRO
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X208PRO
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X212-2LD
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X216
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X216
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X224
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE X224
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF201-3P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF202-2P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF202-2P IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF204
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF204 IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204-2 (incl. SIPLUS NET variant)
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF204-2BA IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF204-2BA IRT
Update to V5.5.1 or later version
https://support.industry.siemens.com/cs/us/en/view/109793952/ - BehobenSCALANCE XF206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF206-1
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF208
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/ - BehobenSCALANCE XF208
Update to V5.2.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801131/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan