SSA-288459: Heap Overflow Vulnerability in RFID terminals
A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code. Siemens recommends specific countermeasures for products.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-7461US | high7.3 | Exploit | ||
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationSIMATIC RF350M
Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.
- MitigationSIMATIC RF650M
Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.
- Kein Fix verfügbarSIMATIC RF350M
Currently no remediation is available
- Kein Fix verfügbarSIMATIC RF650M
Currently no remediation is available
- WorkaroundSIMATIC RF350M
Protect network access to affected devices.
- WorkaroundSIMATIC RF650M
Protect network access to affected devices.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan