SSA-910883: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives
Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a DHCP client vulnerability (CVE-2021-29998) in the integrated SCALANCE X206-1 device. The vulnerability could allow an attacker to cause a heap-based buffer overflow on that device and use it to get access to the drive's internal network. The list of affected drive models can be found in the section "Additional Information" below. Recently manufactured drives are no longer affected. For older drives, Siemens provides detailed remediation advise via customer support.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-29998US | critical9.8 | — | ||
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (2)
- MitigationSINAMICS PERFECT HARMONY GH180 Drives
Contact your Siemens customer support for detailed information how to remediate the issue in affected drives
- BehobenSINAMICS PERFECT HARMONY GH180 Drives
Drives manufactured since 2022 are not affected
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan