SSA-553445

csafDEsiemens_psirt

SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions

Advisory ansehen veröffentlicht 2021-08-10

One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products: - Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems - Aeroderivative Gas Turbines SGT-A20, SGT-A35 and SGT-A65 with FT125 control systems

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2016-20009UScritical9.8—
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer support…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (14)

  • MitigationSGT-100

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-200

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-300

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-400

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-A20

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-A35

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • MitigationSGT-A65

    For more details on how to mitigate this vulnerability, see Rockwell Security Advisory PN1564 (https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1131196, Login required)

  • BehobenSGT-100

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-200

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-300

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-400

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-A20

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-A35

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

  • BehobenSGT-A65

    As only Rockwell Automation / Allen Bradley components are affected, please see Rockwell Security Advisory PN1564 for affected parts and software/firmware updates. Some updates may not be compatible with other components in the system. Contact Siemens Energy for further support.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan