SSA-941426

csafDEsiemens_psirt

SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products

Advisory ansehen veröffentlicht 2021-07-13

There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-27827UShigh7.5—
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle specific optional TLVs, potentially…
CVE-2015-8011UScritical9.8—
Buffer overflow in the lldp_decode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service (daemon crash) and possibly execut…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (68)

  • MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC HMI Unified Comfort Panels

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIMATIC HMI Unified Comfort Panels

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSINUMERIK ONE MCP

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSINUMERIK ONE MCP

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • MitigationTIM 1531 IRC (6GK7543-1MX00-0XE0)

    Disable LLDP protocol support on Ethernet port. This will potentially disrupt the network visibility.

  • BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800773/
  • BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800773/
  • BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)

    Update to V1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109811116/
  • BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)

    Update to V1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109811116/
  • BehobenSIMATIC HMI Unified Comfort Panels

    Update to V17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109746530
  • BehobenSIMATIC HMI Unified Comfort Panels

    Update to V17 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109746530
  • BehobenSINUMERIK ONE MCP

    Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.

  • BehobenSINUMERIK ONE MCP

    Update to V2.0.1 or later version Please contact your Siemens representative for information on how to obtain the update.

  • BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)

    Update to V2.2.28 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109817067/
  • BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800773/
  • BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)

    Update to V3.0 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109800773/
  • BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)

    Update to V3.3.46 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109812218
  • BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)

    Update to V2.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798331/
  • BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)

    Update to V2.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798331/
  • BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)

    Update to V2.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798331/
  • BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)

    Update to V2.2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109798331/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan