Siemens SCALANCE X-300/X408 Switch Family DOS Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-8479US | medium6.8 | — | ||
The FTP server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote authenticated users to cause a denial… | ||||
| CVE-2014-8478US | high7.8 | — | ||
The web server on Siemens SCALANCE X-300 switches with firmware before 4.0 and SCALANCE X 408 switches with firmware before 4.0 allows remote attackers to cause a denial of service… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-15-020-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-020-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSCALANCE X-300 switch family
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X-300 switch family
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X408
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
- MitigationSCALANCE X408
Siemens provides firmware update V4.0, which fixes the vulnerabilities, and recommends updating as soon as possible. The firmware update is available at: http://support.automation.siemens.com/WW/view/en/107178573 Siemens also recommends protecting network access to all products except for perimeter devices with appropriate mechanisms. It is advised to follow recommended security practices and to configure the environment according to operational guidelines in order to run the devices in a protected IT environment. Siemens operational guidelines are available at: http://www.industry.siemens.com/topics/global/en/industrial-security/Documents/operational_guidelines_industrial_security_en.pdf For more information on these vulnerabilities and detailed instructions, please see Siemens Security Advisory SSA-321046 at the following location: http://www.siemens.com/cert/advisories
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan