CVE-2021-25676
mediumPriorität · verfolgen · 30EPSS 0.013 · 71. PerzentilDEEUUSEPSS · bewertet 2026-10-27
A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenRUGGEDCOM RM1224siemens_psirt
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE M-800siemens_psirt
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE S615siemens_psirt
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE SC-600siemens_psirt
Update to V2.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793041/ - BehobenRUGGEDCOM RM1224cisa_csaf_ot
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE M-800cisa_csaf_ot
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE S615cisa_csaf_ot
Update to V6.4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109794349/ - BehobenSCALANCE SC-600cisa_csaf_ot
Update to V2.1.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109793041/ - MitigationRUGGEDCOM RM1224siemens_psirt
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE M-800siemens_psirt
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE S615siemens_psirt
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE SC-600siemens_psirt
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationRUGGEDCOM RM1224cisa_csaf_ot
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE M-800cisa_csaf_ot
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE S615cisa_csaf_ot
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
- MitigationSCALANCE SC-600cisa_csaf_ot
Configure the built-in firewall to only allow SSH incoming connections from trusted IP addresses
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.6
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (20)
Betroffene Produkte und Versionsbereiche.
- siemens ruggedcom rm1224 firmware= 6.3nvdUScpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*
- siemens scalance sc-600 firmware2.1 → 2.1.3nvdUScpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*
Advisories (2)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-296266SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices2021-03-09csaf · siemens_psirtDE
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest version.
- ICSA-21-068-02Siemens SCALANCE and RUGGEDCOM Devices SSH (Update A)2021-03-09icsa · cisa_csaf_otUS
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest version.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (10)
Externe Belege — Patches, Meldungen, Analysen.
- https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdfcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdfPatchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-25676cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02cnnvd
- https://vigilance.fr/vulnerability/Siemens-RUGGEDCOM-RM1224-denial-of-service-via-Failed-SSH-Authentication-34784cnnvd
- https://www.auscert.org.au/bulletins/ESB-2021.0846cnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdfenisa_euvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02enisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan