SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the affected devices. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25667US | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (22)
- MitigationRUGGEDCOM RM1224
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE M-800
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE S615
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE SC-600 Family
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XB-200
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XC-200
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XF-200BA
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XM400
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XP-200
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XR-300WG
Deactivate the STP passive listening feature of the vulnerable devices
- MitigationSCALANCE XR500
Deactivate the STP passive listening feature of the vulnerable devices
- BehobenRUGGEDCOM RM1224
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE M-800
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE S615
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE SC-600 Family
Update to V2.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793041/ - BehobenSCALANCE XB-200
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762982/ - BehobenSCALANCE XC-200
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762982/ - BehobenSCALANCE XF-200BA
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762982/ - BehobenSCALANCE XM400
Update to V6.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109764409/ - BehobenSCALANCE XP-200
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762982/ - BehobenSCALANCE XR-300WG
Update to V4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109762982/ - BehobenSCALANCE XR500
Update to V6.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109761425/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan