SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37182US | high7.5 | — | ||
A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - CSAF Versionself
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - PDF Versionself
- SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices - TXT Versionself
Behebungen (50)
- MitigationSCALANCE XM408-4C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-4C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM408-8C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XM416-4C (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 1x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 24V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR524-8C, 2x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 1x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 24V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR526-8C, 2x230V (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (2HR2, L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR528-6M (L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- MitigationSCALANCE XR552-12M (2HR2, L3 int.)
Disable OSPF in the layer 3 configuration menu (note that OSPF is disabled by default). The vulnerability is not exploitable, when OSPF is disabled
- BehobenSCALANCE XM408-4C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-4C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM408-8C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4C
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XM416-4C (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 1x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 24V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR524-8C, 2x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 1x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 24V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230V
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR526-8C, 2x230V (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (2HR2, L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR528-6M (L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/ - BehobenSCALANCE XR552-12M (2HR2, L3 int.)
Update to V6.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109809635/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan