ICSA-22-349-11

icsaUScisa_csaf_ot

Siemens SIPROTEC 5 Devices

Advisory ansehen veröffentlicht 2022-12-13

Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-45044US——
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (132)

  • MitigationSIPROTEC 5 6MD84 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MD89 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 6MU85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7KE85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7KE85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA84 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SA87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD84 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SD87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ81 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ81 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SJ86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SK85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SL87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SS85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SS85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7ST86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SX82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7SX85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UM85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT82 (CP100)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT82 (CP150)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT85 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT86 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT86 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7UT87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VE85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VK87 (CP200)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VK87 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 7VU85 (CP300)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Communication Module ETH-BD-2FO

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • MitigationSIPROTEC 5 Compact 7SX800 (CP050)

    Restrict access to port 443/tcp and 4443/tcp to trusted IP addresses only

  • Kein Fix geplantSIPROTEC 5 6MD85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 6MD86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7KE85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA84 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SA87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD84 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SD87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SJ86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SK85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SL87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7SS85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7ST85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT85 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT86 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7UT87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 7VK87 (CP200)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Currently no fix is planned

  • Kein Fix geplantSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Currently no fix is planned

  • BehobenSIPROTEC 5 6MD84 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 6MD89 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • BehobenSIPROTEC 5 6MU85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7KE85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • BehobenSIPROTEC 5 7SA82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SA82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SA86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SA87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SD82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SD82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SD86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SD87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SJ81 (CP100)

    Update to V8.89 or later V8.xx version

  • BehobenSIPROTEC 5 7SJ81 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SJ82 (CP100)

    Update to V8.89 or later V8.xx version

  • BehobenSIPROTEC 5 7SJ82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SJ85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SJ86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SK82 (CP100)

    Update to V8.89 or later V8.xx version

  • BehobenSIPROTEC 5 7SK82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SK85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SL82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7SL82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SL86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SL87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7SS85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7ST85 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • BehobenSIPROTEC 5 7ST86 (CP300)

    Update to V9.64 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109742950/
  • BehobenSIPROTEC 5 7SX82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7SX85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UM85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT82 (CP100)

    Update to V8.90 or later V8.xx version

  • BehobenSIPROTEC 5 7UT82 (CP150)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109757433/
  • BehobenSIPROTEC 5 7UT85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT86 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7UT87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VE85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VK87 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 7VU85 (CP300)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109814150/
  • BehobenSIPROTEC 5 Communication Module ETH-BA-2EL (Rev.1)

    Update to V8.89 or later V8.xx version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • BehobenSIPROTEC 5 Communication Module ETH-BB-2FO (Rev. 1)

    Update to V8.89 or later V8.xx version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • BehobenSIPROTEC 5 Communication Module ETH-BD-2FO

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109740816/
  • BehobenSIPROTEC 5 Compact 7SX800 (CP050)

    Update to V9.50 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109796884/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan