SSA-211752

SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA

Advisory ansehen veröffentlicht 2021-06-08

All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

beschreibt (15)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2016-9042US	medium5.9	3.91% (90th)	—	2018-06-04
An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to…
CVE-2015-7853US	critical9.8	11.8% (96th)	—	2017-08-07
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (cr…
CVE-2015-7705US	critical9.8	12.2% (96th)	—	2017-08-07
The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests.
CVE-2017-6458US	high8.8	6.51% (94th)	—	2017-03-27
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
CVE-2016-2518US	medium5.3	15.1% (97th)	—	2017-01-30
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode…
CVE-2015-8138US	medium5.3OT erhöht	6.25% (94th)	—	2017-01-30
NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a packet with an origin timestamp set to zero.
CVE-2016-7433US	medium5.3	9.76% (96th)	—	2017-01-13
NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance tha…
CVE-2016-7431US	medium5.3	8.88% (95th)	—	2017-01-13
NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-20…
CVE-2016-1550US	medium5.3	3.60% (89th)	—	2017-01-06
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a…
CVE-2016-1548US	high7.2	3.81% (90th)	—	2017-01-06
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the c…
CVE-2016-1547US	medium5.3	5.07% (92nd)	—	2017-01-06
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto…
CVE-2016-4956US	medium5.3	16.4% (97th)	—	2016-07-05
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulner…
CVE-2016-4955US	medium5.9	8.77% (95th)	—	2016-07-05
ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoof…
CVE-2016-4954US	high7.5	13.3% (96th)	—	2016-07-05
The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed pa…
CVE-2016-4953US	high7.5	17.2% (97th)	—	2016-07-05
ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect aut…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - CSAF Versionself
SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - PDF Versionself
SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA - TXT Versionself

Behebungen (30)

MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
MitigationSIMATIC CP 443-1 OPC UA
Configure an additional firewall to prevent communication to port udp/123 of an affected device
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned
Kein Fix geplantSIMATIC CP 443-1 OPC UA
Currently no remediation is planned

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan