Schneider Electric communication modules for Modicon M580 and Quantum controllers (Update B)
Successful exploitation of this vulnerability could allow a stack overflow attack, which could result in loss of confidentiality, integrity, and denial of service of the device.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-29999US | critical9.8 | — | ||
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-058-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-058-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (9)
- Mitigation140CRA31200 (Quantum RIO Drop) 140CRA31200
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- Mitigation140CRA31908 (M580 Quantum S908 RIO Drop Adapter) 140CRA31908
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580 communication modules BMECRA BMECRA31210
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580 communication modules BMENOC BMENOC0321
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580/Quantum communication modules BMXCRA BMXCRA31200
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- MitigationModicon M580/Quantum communication modules BMXCRA BMXCRA31210
Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.
- BehobenModicon M580 communication modules BMECRA BMECRA31210
Modicon M580 communication modules BMECRA BMECRA31210, Modicon M580/Quantum communication modules BMXCRA BMXCRA31200/BMXCRA31210: Version SV02.80 of BMECRA31210, BMXCRA31200, BMXCRA31210 includes a fix for these vulnerabilities and is available for download.
https://www.se.com/ww/en/product-country-selector/?pageType=product&sourceId=BMXCRA31210 - BehobenModicon M580 communication modules BMENOC BMENOC0321
Modicon M580 communication modules BMENOC BMENOC0321: Version SV1.10 of BMENOC0321 includes a fix for this vulnerability and is available for download.
https://www.se.com/ww/en/product/BMENOC0321/m580-noc-control/ - BehobenModicon M580/Quantum communication modules BMXCRA BMXCRA31200
Modicon M580 communication modules BMECRA BMECRA31210, Modicon M580/Quantum communication modules BMXCRA BMXCRA31200/BMXCRA31210: Version SV02.80 of BMECRA31210, BMXCRA31200, BMXCRA31210 includes a fix for these vulnerabilities and is available for download.
https://www.se.com/ww/en/product-country-selector/?pageType=product&sourceId=BMXCRA31210
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan