SSA-516818

csafDEsiemens_psirt

SSA-516818: TCP Sequence Number Validation Vulnerability in the TCP/IP Stack of CP343-1 Devices

Advisory ansehen veröffentlicht 2024-02-13

Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-51440UShigh7.5—
A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (All versions), SIPLUS NET CP 343-1 (6AG1343…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • Kein Fix geplantSIMATIC CP 343-1 (6GK7343-1EX30-0XE0)

    Currently no fix is planned

  • Kein Fix geplantSIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0)

    Currently no fix is planned

  • Kein Fix geplantSIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0)

    Currently no fix is planned

  • WorkaroundSIMATIC CP 343-1 (6GK7343-1EX30-0XE0)

    Apply network segmentation and Defense-in-Depth practices to reduce likelihood of a threat actor to be able to reach a potentially vulnerable device

  • WorkaroundSIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0)

    Apply network segmentation and Defense-in-Depth practices to reduce likelihood of a threat actor to be able to reach a potentially vulnerable device

  • WorkaroundSIPLUS NET CP 343-1 (6AG1343-1EX30-7XE0)

    Apply network segmentation and Defense-in-Depth practices to reduce likelihood of a threat actor to be able to reach a potentially vulnerable device

  • WorkaroundSIPLUS NET CP 343-1 Lean (6AG1343-1CX10-2XE0)

    Apply network segmentation and Defense-in-Depth practices to reduce likelihood of a threat actor to be able to reach a potentially vulnerable device

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan