Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-0160US | high7.5OT kritisch | KEV | ||
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-105-03B JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-105-03B - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (5)
- MitigationAPE 2.0 (when SSL/TLS component is used in customer implementation)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationCP1543-1 (when FTPS active)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationS7-1500 (when HTTPS active)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationWinCC OA only
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100 - MitigationeLAN-8.2 eLAN (when RIP is used)
S7-1500 V1.5. The update for S7-1500 V1.5 can be obtained here: (http://support.automation.siemens.com/WW/view/en/67295862/133100)
http://support.automation.siemens.com/WW/view/en/67295862/133100
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan