SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of one of these vulnerabilities (CVE-2020-13988) to Siemens products. Siemens has released updates for the affected products and recommends to update to the latest versions. The impact of additional "AMNESIA:33" vulnerabilities is described in Siemens Security Advisory SSA-541018.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-13988US | high7.5 | — | ||
An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices - CSAF Versionself
- SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices - PDF Versionself
- SSA-541017: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices - TXT Versionself
Behebungen (14)
- MitigationSENTRON 3VA COM100/800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA DSP800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (without MID Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200T
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSIRIUS 3RW5 communication module Modbus TCP
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- BehobenSENTRON 3VA COM100/800
Update to V4.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - BehobenSENTRON 3VA DSP800
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761031/ - BehobenSENTRON PAC2200 (without MID Approval)
Update to V3.0.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109760897/ - BehobenSENTRON PAC3200
Update to V2.4.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - BehobenSENTRON PAC3200T
Update to V3.0.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793060/ - BehobenSENTRON PAC4200
Update to V2.0.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/ - BehobenSIRIUS 3RW5 communication module Modbus TCP
Update to V1.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109759671/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan