SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2)
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-2020-17437) to Siemens products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available. The impact of another "AMNESIA:33" vulnerability (CVE-2020-13988) is described in Siemens Security Advisory SSA-541017.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-17437US | high8.2 | — | ||
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, t… | ||||
| CVE-2020-13987US | high7.5 | — | ||
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - CSAF Versionself
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - PDF Versionself
- SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2) - TXT Versionself
Behebungen (24)
- MitigationSENTRON 3VA COM100/800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA COM100/800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON 3VA DSP800
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with CLP Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (with MID Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC2200 (without MID Approval)
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3200T
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC3220
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- MitigationSENTRON PAC4200
For successful exploitation, an attacking system must be located in the same Modbus TCP segment as a vulnerable device. Therefore ensure that only trusted systems are attached to that segment and only trusted persons have access.
- Kein Fix geplantSENTRON PAC2200 (with CLP Approval)
Currently no remediation is planned
- BehobenSENTRON 3VA COM100/800
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - BehobenSENTRON 3VA COM100/800
Update to V4.4.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109765343/ - BehobenSENTRON 3VA DSP800
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799046/ - BehobenSENTRON PAC2200 (with MID Approval)
MID-certified devices do not support firmware updates; V3.2.2 is contained in devices that are labeled as "M22 MID"
- BehobenSENTRON PAC2200 (without MID Approval)
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109760897/ - BehobenSENTRON PAC3200
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - BehobenSENTRON PAC3200
Update to V2.4.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/31674577/ - BehobenSENTRON PAC3200T
Update to V3.2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793060/ - BehobenSENTRON PAC3220
Update to V3.2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109780938/ - BehobenSENTRON PAC4200
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/ - BehobenSENTRON PAC4200
Update to V2.3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/35029840/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan