SSA-732250: Libcurl Vulnerabilities in Industrial Devices
Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-22924US | low3.7 | Exploit | ||
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching fu… | ||||
| CVE-2021-22901US | high8.1 | — | ||
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malic… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (46)
- MitigationLOGO! CMR family
Use the certificate projection feature to pin the valid certificates of external servers providing the services E-mail and DynDNS to the affected devices. To do this, see the description in the sections "Ca Certificate" in the chapters "E-Mail" and "DynDNS" in the manual
- Kein Fix geplantLOGO! CMR family
Currently no fix is planned
- BehobenRUGGEDCOM RM1224 LTE(4G) EU
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenRUGGEDCOM RM1224 LTE(4G) NAM
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M804PB
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M812-1 ADSL-Router (Annex A)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M812-1 ADSL-Router (Annex B)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M816-1 ADSL-Router (Annex A)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M816-1 ADSL-Router (Annex B)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M826-2 SHDSL-Router
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M874-2
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M874-3
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-3 (EVDO)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-3 (ROK)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-4 (EU)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-4 (NAM)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE MUM856-1 (EU)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE MUM856-1 (RoW)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE S615
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSIMATIC CP 1242-7 V2
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1242-7 V2
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-1
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-1
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE EU
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE EU
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE US
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE US
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-8 IRC
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-8 IRC
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1543-1
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678 - BehobenSIMATIC CP 1543-1
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678 - BehobenSIMATIC CP 1545-1
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC CP 1545-1
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC RTU3010C
Update to V5.0.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810215/ - BehobenSIMATIC RTU3030C
Update to V5.0.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810215/ - BehobenSIMATIC RTU3031C
Update to V5.0.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810215/ - BehobenSIMATIC RTU3041C
Update to V5.0.14 or later version
https://support.industry.siemens.com/cs/ww/en/view/109810215/ - BehobenSINEMA Remote Connect Client
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/ - BehobenSIPLUS NET CP 1242-7 V2
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS NET CP 1242-7 V2
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS NET CP 1543-1
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678 - BehobenSIPLUS NET CP 1543-1
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678 - BehobenSIPLUS S7-1200 CP 1243-1
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 RAIL
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 RAIL
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan