SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4
Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-26554US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process, but cannot attack ntp… | ||||
| CVE-2023-26553US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq process, but cannot attack… | ||||
| CVE-2023-26552US | medium5.6 | — | ||
mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, but cannot attack ntpd… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - CSAF Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - HTML Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - PDF Versionself
- SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4 - TXT Versionself
Behebungen (12)
- BehobenSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/ - BehobenSITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)
Update to V2.5.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/79207181/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan