SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan
Vulnerabilities in the third-party component strongSwan could allow an attacker to cause a denial of service (DoS) condition in affected devices by exploiting integer overflow bugs. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-41991US | high7.5 | — | ||
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigge… | ||||
| CVE-2021-41990US | high7.5 | — | ||
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated s… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - CSAF Versionself
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - PDF Versionself
- SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan - TXT Versionself
Behebungen (71)
- MitigationSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Only deploy certificates via TIA portal that got created with TIA portal
- MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Only deploy certificates via TIA portal that got created with TIA portal
- BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - BehobenSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - BehobenSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - BehobenSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - BehobenSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V2.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805907/ - BehobenSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSINEMA Remote Connect Server
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/ - BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808678/ - BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/ - BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan