SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices
Security researchers discovered and disclosed 14 vulnerabilities in the Interniche IP stack, also known as "INFRA:HALT" vulnerabilities [0]. This advisory describes the impact to Siemens low voltage products, which are only affected by four out of the 14 vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available. [0] https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-31401US | high7.5 | — | ||
An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header len… | ||||
| CVE-2020-35685US | critical9.1OT erhöht | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As… | ||||
| CVE-2020-35684US | high7.5 | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the le… | ||||
| CVE-2020-35683US | high7.5 | — | ||
An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the I… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - CSAF Versionself
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - PDF Versionself
- SSA-789208: Multiple Vulnerabilities (INFRA:HALT) in Interniche IP-Stack based Low Voltage Devices - TXT Versionself
Behebungen (14)
- Kein Fix geplantSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- Kein Fix geplantSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- Kein Fix geplantSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- Kein Fix geplantSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Currently no remediation is planned
- BehobenSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - BehobenSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - BehobenSENTRON 3WA COM190
Update to V2.0.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109782123/ - BehobenSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - BehobenSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - BehobenSENTRON 3WL COM35
Update to V1.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109766651/ - BehobenSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - BehobenSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - BehobenSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/ - BehobenSENTRON 7KM PAC Switched Ethernet PROFINET Expansion Module
Update to V2.1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109749555/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan