CVE-2016-2183
mediumPriorität · beachten · 73OT-Risiko · hochEPSS 0.947 · 100. PerzentilExploit · PoCDEEURUUSEPSS · bewertet 2026-10-22
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)siemens_psirt
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenFirmware <V3.3.32 installed on IE-SW-PL10M-3GT-7TXweidmueller_psirt
Update to version V3.3.32
- BehobenFirmware <V3.3.32 installed on IE-SW-PL10MT-3GT-7TXweidmueller_psirt
Update to version V3.3.32
- BehobenFirmware <V3.4.30 installed on IE-SW-PL16M-16TXweidmueller_psirt
Update to version V3.4.30
- BehobenFirmware <V3.4.30 installed on IE-SW-PL16MT-16TXweidmueller_psirt
Update to version V3.4.30
- BehobenFirmware <V3.4.38 installed on IE-SW-PL18M-2GC-16TXweidmueller_psirt
Update to version V3.4.38
- BehobenFirmware <V3.4.38 installed on IE-SW-PL18MT-2GC-16TXweidmueller_psirt
Update to version V3.4.38
- BehobenFirmware <V3.5.34 installed on IE-SW-VL08MT-5TX-1SC-2SCSweidmueller_psirt
Update to version V3.5.34
- BehobenFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2SCweidmueller_psirt
Update to version V3.5.34
- BehobenFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2SCSweidmueller_psirt
Update to version V3.5.34
- BehobenFirmware <V3.5.34 installed on IE-SW-VL08MT-6TX-2STweidmueller_psirt
Update to version V3.5.34
- BehobenFirmware <V3.5.34 installed on IE-SW-VL08MT-8TXweidmueller_psirt
Update to version V3.5.34
- BehobenFirmware <V3.6.30 installed on IE-SW-VL05M-5TXweidmueller_psirt
Update to version V3.6.30
- BehobenFirmware <V3.6.30 installed on IE-SW-VL05MT-5TXweidmueller_psirt
Update to version V3.6.30
- BehobenTelepresence Box 7.0.0<8.0.0 older than 08.08.2025trumpf_psirt
Since August 8st, 2025, an automated configuration update is available for TRUMPF machines with a Telepresence Box 7.0.0 and newer. It will automatically be applied when activating a remote session from the machine. It is not necessary for a TRUMPF technician to join the session.
- Behobenhelmholz_psirt
Update to latest firmware 1.12.100
- Behobenhelmholz_psirt
Update to latest firmware 1.10.232
- BehobenUR B30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR B90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR C30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR C60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR C70cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR C95cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR D30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR D60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR F35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR F60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR G30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR G60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR L30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR L60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR L90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR M60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR N60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR T35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenUR T60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx - BehobenAE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAE-200Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAE-200Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAE-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAE-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAG-150A-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenAG-150A-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenEB-50GU-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenEB-50GU-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenEW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenEW-50Ecisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenEW-50Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenG-150ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenGB-50ADcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenGB-50ADA-Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenGB-50ADA-Jcisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenTE-200Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenTE-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenTW-50Acisa_csaf_ot
TW-50A: Update to Version 7.98 or later
- BehobenSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - BehobenSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Update to V3.2.7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109814809/ - MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)siemens_psirt
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationUR B30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR B90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C70cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR C95cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR D30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR D60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR F35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR F60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR G30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR G60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR L90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR M60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR N60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR T35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationUR T60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
- MitigationAE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-200Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-200Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAE-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAG-150A-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationAG-150A-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEB-50GU-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEB-50GU-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Ecisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationEW-50Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationG-150ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADA-Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationGB-50ADA-Jcisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTE-200Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTE-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationTW-50Acisa_csaf_ot
AE-200A: Update to Version 7.98 or later
- MitigationSCALANCE X204RNA (HSR) (6GK5204-0BA00-2MB2)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA (PRP) (6GK5204-0BA00-2KB2)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (HSR) (6GK5204-0BS00-2NA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP) (6GK5204-0BS00-3LA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationSCALANCE X204RNA EEC (PRP/HSR) (6GK5204-0BS00-3PA3)cisa_csaf_ot
Deactivate the webserver if not required, and if deactivation is supported by the product
- MitigationIntelliSpace Portal 7.0.xcisa_csaf_ot
Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.
- MitigationIntelliSpace Portal 8.0.xcisa_csaf_ot
Users with questions regarding their specific ISP installations are advised by Philips to contact their local Philips service support team or their regional service support.
- Kein Fix geplantTelepresence Box <7.0.0trumpf_psirt
Machines using a Telepresence Box 6.x and older can't use secure encryption. All customers still connecting to TRUMPF with such a device will be identified by TRUMPF and contacted with further information. It is possible to order a new Telepresence Box via your sales representative. In such a case, please contact the TRUMPF Service for installation.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (1)
Öffentlicher Proof-of-Concept- und Exploit-Code.
betroffene Produkte (265)
Betroffene Produkte und Versionsbereiche.
- Cisco Advanced Malware Protectionalle Versionencert_bundDEcpe:/h:cisco:advanced_malware_protection:-
- Cisco AnyConnect Secure Mobility Solutionalle Versionencert_bundDEcpe:/a:cisco:anyconnect_secure_mobility_client:2.0
- Cisco Application Networking Manageralle Versionencert_bundDEcpe:/a:cisco:application_networking_manager:-
- Cisco Intrusion Prevention System (IPS)alle Versionencert_bundDEcpe:/h:cisco:intrusion_prevention_system:-
Advisories (15)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-412672SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.72022-12-13csaf · siemens_psirtDE
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions.
- VDE-2025-023Weidmueller: OpenSSL vulnerability in industrial ethernet switches2025-03-05csaf · weidmueller_psirtDE
Multiple Weidmueller products are affected by an OpenSSL vulnerability. Weidmüller has released new firmwares of the affected products to fix the vulnerability.
- VDE-2025-078TRUMPF: Remote support uses an outdated encryption algorithm2025-08-25csaf · trumpf_psirtDE
The TRUMPF remote support infrastructure selects an outdated encryption algorithm when setting up communication channels for machines. This cannot be prevented for old machines. For most machines it is possible to change the encryption settings.
- VDE-2026-013Helmholz: Use of a Broken or Risky Cryptographic Algorithm2026-04-07csaf · helmholz_psirtDE
Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.
- VDE-2026-015Helmholz: Use of a Broken or Risky Cryptographic Algorithm2026-04-21csaf · helmholz_psirtDE
Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.
- WID-SEC-W-2022-1955OpenSSL: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2016-08-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- WID-SEC-W-2024-0064Juniper Produkte: Mehrere SchwachstellenDeutsch2024-01-10csaf · cert_bundDE
Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.
- WID-SEC-W-2024-0209OpenSSL: Mehrere SchwachstellenDeutsch2016-09-22csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.
- WID-SEC-W-2024-1277Oracle Fusion Middleware: Mehrere SchwachstellenDeutsch2017-04-18csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.
- WID-SEC-W-2026-0180Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.
- ICSA-21-075-02GE UR Family (Update A)2021-03-16icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.
- ICSA-22-160-01Mitsubishi Electric Air Conditioning Systems2022-06-09icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to disclose or tamper data in communication between the air conditioning system and the external computers or cause a denial-of-service condition.
- ICSA-22-349-21Siemens SCALANCE X-200RNA Switch Devices2022-12-13icsa · cisa_csaf_otUS
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSMA-18-058-02Philips Intellispace Portal ISP Vulnerabilities2018-02-27icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to sensitive information, perform man-in-the-middle attacks, create denial of service conditions, or execute arbitrary code.
- PSF-2016-4Sweet32 attack (DES, 3DES)2016-09-01vendor · osvUS
The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (450)
Externe Belege — Patches, Meldungen, Analysen.
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759cnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00022.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00023.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00024.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00031.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00005.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00011.htmlcnnvd
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00012.htmlcnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan