SSA-772220: OpenSSL Vulnerabilities in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available. [0] https://www.openssl.org/news/secadv/20210325.txt
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3449US | medium5.9 | Exploit | ||
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - CSAF Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - HTML Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - PDF Versionself
- SSA-772220: OpenSSL Vulnerabilities in Industrial Products - TXT Versionself
Behebungen (113)
- MitigationRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update ROX II to V2.14.1 ( https://support.industry.siemens.com/cs/ww/en/view/109800780/) or later version
- MitigationRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
use TLS v1.3 only
- MitigationRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
use TLS v1.3 only
- MitigationSCALANCE M804PB (6GK5804-0AP00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
use TLS v1.3 only
- MitigationSCALANCE M874-2 (6GK5874-2AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M874-3 (6GK5874-3AA00-2AA2)
use TLS v1.3 only
- MitigationSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
use TLS v1.3 only
- MitigationSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
use TLS v1.3 only
- MitigationSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
use TLS v1.3 only
- MitigationSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
use TLS v1.3 only
- MitigationSCALANCE S615 (6GK5615-0AA00-2AA2)
use TLS v1.3 only
- MitigationSIMATIC Logon V1.6
Restrict access to Remote Access service, if used, to mitigate this issue. This service is disabled by default.
- MitigationSIMATIC PDM
Restrict access to the command interface, if used, to mitigate this issue. This interface is disabled by default.
- Kein Fix geplantSCALANCE S602
Currently no fix is planned
- Kein Fix geplantSCALANCE S612
Currently no fix is planned
- Kein Fix geplantSCALANCE S623
Currently no fix is planned
- Kein Fix geplantSCALANCE S627-2M
Currently no fix is planned
- Kein Fix geplantSCALANCE W-700 IEEE 802.11n family
Currently no fix is planned
- Kein Fix geplantSINAMICS Connect 300
Currently no fix is planned
- BehobenRUGGEDCOM CROSSBOW Station Access Controller (SAC)
Update to V5.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/ - BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276/ - BehobenSCALANCE LPE9403 (6GK5998-3GS00-2AC2)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805118/ - BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)
Update to V7.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109807276 - BehobenSCALANCE SC622-2C (6GK5622-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - BehobenSCALANCE SC632-2C (6GK5632-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - BehobenSCALANCE SC636-2C (6GK5636-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - BehobenSCALANCE SC642-2C (6GK5642-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - BehobenSCALANCE SC646-2C (6GK5646-2GS00-2AC2)
Update to V2.1.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109797244 - BehobenSCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE W1788-1 M12 (6GK5788-1GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE W1788-2 EEC M12 (6GK5788-2GY01-0TA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE W1788-2 M12 (6GK5788-2GY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808629/ - BehobenSCALANCE XB-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - BehobenSCALANCE XC-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - BehobenSCALANCE XF-200BA
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - BehobenSCALANCE XM-400
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796319 - BehobenSCALANCE XP-200
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - BehobenSCALANCE XR-300WG
Update to V4.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109799569 - BehobenSCALANCE XR-500 family
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109796317 - BehobenSIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-1 (6GK7243-1BX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1543-1 (6GK7543-1AX00-0XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - BehobenSIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIMATIC CP 1545-1 (6GK7545-1GX00-0XE0)
Update to V1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811116/ - BehobenSIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - BehobenSIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00)
Update to V1.6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109803418/ - BehobenSIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants)
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI Comfort Panels (incl. SIPLUS variants)
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC HMI KTP Mobile Panels
Update to V17.0 Upd 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109746530/ - BehobenSIMATIC Logon V1.6
Update to V1.6 Upd5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794407/ - BehobenSIMATIC MV540 H (6GF3540-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC MV540 S (6GF3540-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC MV550 H (6GF3550-0GE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC MV550 S (6GF3550-0CD10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC MV560 U (6GF3560-0LE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC MV560 X (6GF3560-0HE10)
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804366 - BehobenSIMATIC PCS 7 TeleControl
Update to V9.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109805072/ - BehobenSIMATIC PCS neo
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801424/ - BehobenSIMATIC PDM
Update to V9.2 SP 1 or later version
- BehobenSIMATIC Process Historian OPC UA Server
Update SIMATIC PCS neo to V3.1 or later version To obtain SIMATIC PCS neo V3.1 contact your local support.
- BehobenSIMATIC RF166C (6GT2002-0EE20)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF185C (6GT2002-0JE10)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF186C (6GT2002-0JE20)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF186CI (6GT2002-0JE50)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF188C (6GT2002-0JE40)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF188CI (6GT2002-0JE60)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808633 - BehobenSIMATIC RF360R (6GT2801-5BA30)
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808759 - BehobenSIMATIC RF610R (6GT2811-6BC10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - BehobenSIMATIC RF615R (6GT2811-6CC10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - BehobenSIMATIC RF650R (6GT2811-6AB20)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - BehobenSIMATIC RF680R (6GT2811-6AA10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - BehobenSIMATIC RF685R (6GT2811-6CA10)
Update to V4.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808361 - BehobenSIMATIC S7-1200 CPU family (incl. SIPLUS variants)
Update to V4.5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793280/ - BehobenSIMATIC S7-1500 CPU 1518-4 PN/DP MFP family (incl. SIPLUS variant)
Update to V2.9.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109478459/ - BehobenSIMATIC WinCC Runtime Advanced
Update to V17 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800912 - BehobenSIMATIC WinCC TeleControl
Update to V7.5 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814522/ - BehobenSINEC NMS
Update to V1.0 SP2
- BehobenSINEMA Server
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/ - BehobenSINUMERIK OPC UA Server
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801292 - BehobenSIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0)
Update to V2.2.28 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817067/ - BehobenSIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS NET CP 1543-1 (6AG1543-1AX00-2XE0)
Update to V3.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109800773 - BehobenSIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS S7-1200 CP 1243-1 RAIL (6AG2243-1BX30-1XE0)
Update to V3.3.46 or later version
https://support.industry.siemens.com/cs/ww/en/view/109812218 - BehobenSIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331 - BehobenTIA Administrator
Update to V1.0 SP4 or later version
https://support.industry.siemens.com/cs/ww/en/view/114358/ - BehobenTIM 1531 IRC (6GK7543-1MX00-0XE0)
Update to V2.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109798331
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan