SSA-408105

csafDEsiemens_psirt

SSA-408105: Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Products

Advisory ansehen veröffentlicht 2022-12-13

The openSSL component, versions 3.0.0 through 3.0.6, contains two buffer overflow vulnerabilities (CVE-2022-3602, CVE-2022-3786) in the X.509 certificate verification [0]. They could allow an attacker to create a denial of service condition or execute arbitrary code on a vulnerable TLS server (if the server requests client certificate authentication), or on a vulnerable TLS client. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available. [0] https://www.openssl.org/news/secadv/20221101.txt

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-3786UShigh7.5Exploit
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
CVE-2022-3602UShigh7.5Exploit
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (36)

  • MitigationCalibre ICE

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationCalibre ICE

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationMcenter

    As a mitigation for vulnerable versions: Ensure that only trusted (CA) certificates are contained in the Machine Agent's truststore

  • MitigationMcenter

    As a mitigation for vulnerable versions: Ensure that only trusted (CA) certificates are contained in the Machine Agent's truststore

  • MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSICAM GridPass

    As a mitigation for vulnerable versions: In the truststore, do not add CA certificates that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSICAM GridPass

    As a mitigation for vulnerable versions: In the truststore, do not add CA certificates that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSIMATIC RTLS Locating Manager

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • MitigationSIMATIC RTLS Locating Manager

    Siemens products that contain a vulnerable TLS client: in cases where this option is configurable: ensure that TLS server certificate verification is turned on and do not configure trust for CA certificates, that contain a nameConstraint-extension (https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.10) with punycode-encoded internationalized domain names

  • BehobenCalibre ICE

    Update to V2023.1 or later version

  • BehobenCalibre ICE

    Update to V2023.1 or later version

  • BehobenMcenter

    Update to V5.3.0 or later version

    https://download.industrysoftware.automation.siemens.com/
  • BehobenMcenter

    Update to V5.3.0 or later version

    https://download.industrysoftware.automation.siemens.com/
  • BehobenSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)

    Update to V3.2.8 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109995126/
  • BehobenSICAM GridPass

    Update to V2.20 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763384/
  • BehobenSICAM GridPass

    Update to V2.20 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109763384/
  • BehobenSIMATIC RTLS Locating Manager

    Update to V2.13.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109821005/
  • BehobenSIMATIC RTLS Locating Manager

    Update to V2.13.0.3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109821005/
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan