SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server
Advisory ansehen veröffentlicht 2021-04-13
The latest update for SINEMA Remote Connect Server fixes two Denial-of-Service vulnerabilities in the underlying third-party XML parser. Siemens has released updates for the affected product and recommends to update to the latest versions.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-7595US | high7.5 | — | ||
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation. | ||||
| CVE-2019-19956US | high7.5 | — | ||
xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - CSAF Versionself
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - PDF Versionself
- SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server - TXT Versionself
03
Behebungen (2)
- BehobenSINEMA Remote Connect Server
Update to V3.0
https://support.industry.siemens.com/cs/ww/en/view/109793790 - BehobenSINEMA Remote Connect Server
Update to V3.0
https://support.industry.siemens.com/cs/ww/en/view/109793790
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan