SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15
Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS). Siemens has released an update for Brownfield Connectivity - Client and recommends to update to the latest version.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-1473US | high7.5 | — | ||
The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when… | ||||
| CVE-2022-1434US | medium5.9OT erhöht | — | ||
The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this… | ||||
| CVE-2022-1343US | medium5.3 | — | ||
The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be posit… | ||||
| CVE-2022-1292US | high7.3 | Exploit | ||
The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is autom… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15 - CSAF Versionself
- SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15 - PDF Versionself
- SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15 - TXT Versionself
Behebungen (4)
- BehobenBrownfield Connectivity - Client
Update to V2.15 or later version Contact customer support to obtain the update
- BehobenBrownfield Connectivity - Client
Update to V2.15 or later version Contact customer support to obtain the update
- BehobenBrownfield Connectivity - Client
Update to V2.15 or later version Contact customer support to obtain the update
- BehobenBrownfield Connectivity - Client
Update to V2.15 or later version Contact customer support to obtain the update
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan