SSA-406691: Buffer Vulnerabilities in DHCP function of RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, ISC DHCP, could allow an attacker to cause a buffer overrun due to a bug when reading a stored DHCP lease containing certain option information, eventually leading to a denial-of-service condition, or cause a remote-code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-25217US | low3.3 | — | ||
In ISC DHCP 4.1-ESV-R1 -> 4.1-ESV-R16, ISC DHCP 4.4.0 -> 4.4.2 (Other branches of ISC DHCP (i.e., releases in the 4.0.x series or lower and releases in the 4.3.x series) are beyond… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (20)
- BehobenRUGGEDCOM ROX MX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1400
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1500
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1501
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1510
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1511
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1512
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1524
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX1536
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - BehobenRUGGEDCOM ROX RX5000
Update to V2.15.0 or later version
https://support.industry.siemens.com/cs/document/109805782/ - WorkaroundRUGGEDCOM ROX MX5000
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1400
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1500
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1501
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1510
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1511
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1512
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1524
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX1536
Disable the DHCP client if not needed for operations
- WorkaroundRUGGEDCOM ROX RX5000
Disable the DHCP client if not needed for operations
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan