SSA-324955: SAD DNS Attack in Linux Based Products
A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://www.saddns.net/. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25705US | high7.4OT erhöht | Exploit | ||
A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (64)
- MitigationRUGGEDCOM RM1224 family (6GK6108-4AM00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE M-800 family
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE S615 (6GK5615-0AA00-2AA2)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE SC-600 Family
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSCALANCE W1750D
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1543-1 (incl. SIPLUS variants)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV540 H (6GF3540-0GE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV540 S (6GF3540-0CD10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV550 H (6GF3550-0GE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV550 S (6GF3550-0CD10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV560 U (6GF3560-0LE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIMATIC MV560 X (6GF3560-0HE10)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSINEMA Remote Connect Server
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)
Disable outgoing ICMP packets by using "service ACLs" to implement blocking rules
- BehobenRUGGEDCOM RM1224 family (6GK6108-4AM00)
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE M-800 family
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE SC-600 Family
Update to V2.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793041/ - BehobenSCALANCE W1750D
Update to V8.7.1.3 or later version
https://support.industry.siemens.com/cs/de/en/view/109802805/ - BehobenSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799604/ - BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - BehobenSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799584/ - BehobenSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799584/ - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1543-1 (incl. SIPLUS variants)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - BehobenSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - BehobenSIMATIC MV540 H (6GF3540-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSIMATIC MV540 S (6GF3540-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSIMATIC MV550 H (6GF3550-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSIMATIC MV550 S (6GF3550-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSIMATIC MV560 U (6GF3560-0LE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSIMATIC MV560 X (6GF3560-0HE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/de/en/view/109804366 - BehobenSINEMA Remote Connect Server
Update to V3.0 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793790/ - BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799604/ - BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/us/en/view/109812218/ - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 Update 1 or later version
https://support.industry.siemens.com/cs/de/en/view/109803672/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 Update 1 or later version
https://support.industry.siemens.com/cs/de/en/view/109803672/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan