ICSA-12-102-05

icsaUScisa_csaf_ot

Siemens Scalance S Multiple Security Vulnerabilities

Advisory ansehen veröffentlicht 2012-01-13

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2012-1800USmedium6.1—
Stack-based buffer overflow in the Profinet DCP protocol implementation on the Siemens Scalance S Security Module firewall S602 V2, S612 V2, and S613 V2 with firmware before 2.3.0.…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (3)

  • MitigationSCALANCE S602

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
  • MitigationSCALANCE S612

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
  • MitigationScalance S613

    Siemens has published a patch that resolves both of the identified vulnerabilities and strongly recommends installing the updates by using the following links: Siemens Security Advisory firmware update (http://support.automation.siemens.com/WW/view/en/59869684) information about industrial security by Siemens recommended security practices by US-CERT.

    http://support.automation.siemens.com/WW/view/en/59869684
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan