Digi International OpenSSL Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-0160US | high7.5OT kritisch | KEV | ||
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-128-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-128-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationConnectPort
Digi International published a Security Notice OpenSSL “Heartbleed” on April 14, 2014, updated on April 18, 2014, at the following URL: (http://www.digi.com/support/kbase/kbaseresultdetl?id=3564)
http://www.digi.com/support/kbase/kbaseresultdetl?id=3564 - MitigationDigi Embedded Linux
Digi International published a Security Notice OpenSSL “Heartbleed” on April 14, 2014, updated on April 18, 2014, at the following URL: (http://www.digi.com/support/kbase/kbaseresultdetl?id=3564)
http://www.digi.com/support/kbase/kbaseresultdetl?id=3564 - MitigationDigi Embedded Yocto
Digi International published a Security Notice OpenSSL “Heartbleed” on April 14, 2014, updated on April 18, 2014, at the following URL: (http://www.digi.com/support/kbase/kbaseresultdetl?id=3564)
http://www.digi.com/support/kbase/kbaseresultdetl?id=3564 - MitigationWireless Vehicle Bus Adapter (WVA)
Digi International published a Security Notice OpenSSL “Heartbleed” on April 14, 2014, updated on April 18, 2014, at the following URL: (http://www.digi.com/support/kbase/kbaseresultdetl?id=3564)
http://www.digi.com/support/kbase/kbaseresultdetl?id=3564
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan