ICSA-24-256-15

icsaUScisa_csaf_ot

Siemens Industrial Products

Advisory ansehen veröffentlicht 2024-09-10

An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2024-6387UShigh8.1Exploit
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • MitigationIndustrial Edge Management OS (IEM-OS)

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINAMICS IIoT module

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINEMA Remote Connect Server

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINUMERIK ONE

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • Kein Fix geplantIndustrial Edge Management OS (IEM-OS)

    Currently no fix is planned

  • BehobenSINAMICS IIoT module

    Update to V1.0 HF1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989288/
  • BehobenSINEMA Remote Connect Server

    Update to V3.2 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109974084/
  • BehobenSINUMERIK ONE

    Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan