CVE-2022-38371
highPriorität · verfolgen · 31EPSS 0.016 · 75. PerzentilDEEUUSEPSS · bewertet 2026-10-26
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.7), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.21), APOGEE PXC Modular (BACnet) (All versions < V3.5.7), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.21), Desigo PXC00-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC00-U (All versions >= V2.3 < V6.30.37), Desigo PXC001-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC100-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC12-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC128-U (All versions >= V2.3 < V6.30.37), Desigo PXC200-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC22.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC36.1-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC50-E.D (All versions >= V2.3 < V6.30.37), Desigo PXC64-U (All versions >= V2.3 < V6.30.37), Desigo PXM20-E (All versions >= V2.3 < V6.30.37), Nucleus NET for Nucleus PLUS V1 (All versions < V5.2a), Nucleus NET for Nucleus PLUS V2 (All versions < V5.4), Nucleus ReadyStart V3 V2012 (All versions < V2012.08.1), Nucleus ReadyStart V3 V2017 (All versions < V2017.02.4), Nucleus Source Code (All versions including affected FTP server), TALON TC Compact (BACnet) (All versions < V3.5.7), TALON TC Modular (BACnet) (All versions < V3.5.7). The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenNucleus NET for Nucleus PLUS V1siemens_psirt
Update to V5.2a as available in Nucleus PLUS V1.15 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - BehobenNucleus NET for Nucleus PLUS V2siemens_psirt
Update to V5.4 as available in Nucleus PLUS V2.1f and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - BehobenNucleus ReadyStart V3 V2012siemens_psirt
Update to V2012.08.1 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/1009925838/ - BehobenNucleus ReadyStart V3 V2017siemens_psirt
Update to V2017.02.4 and apply the patch "2017.02.4_patch_CVE-2022-38371"
https://support.sw.siemens.com/en-US/product/1009925838/ - BehobenNucleus Source Codesiemens_psirt
Contact customer support to receive patch and update information
- BehobenAPOGEE PXC Compact (BACnet)siemens_psirt
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)siemens_psirt
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenDesigo PXC00-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC00-Usiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC001-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC100-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC12-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC128-Usiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC200-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC22-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC22.1-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC36.1-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC50-E.Dsiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC64-Usiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXM20-Esiemens_psirt
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenTALON TC Compact (BACnet)siemens_psirt
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)siemens_psirt
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - Behobenwago_psirt
Wago recommends all effected users to update to the firmware version listed below: ### Series WAGO 750-3x / -8x | Article Number | Fixed Version | |-----------------------|----------------------------------| | 750-330 | Beta FW17 Q1/2023 | | 750-332 | FW11 after BACnet certification | | 750-352/xxx-xxx | FW17 Q1/2023 | | 750-362/xxx-xxx | FW11 Q1/2023 | | 750-363/xxx-xxx | FW11 Q1/2023 | | 750-364/xxx-xxx | FW11 Q1/2023 | | 750-365/xxx-xxx | FW11 Q1/2023 | | 750-823 | FW11 Q1/2023 | | 750-829 | Beta FW17 Q1/2023 | | 750-831/xxx-xxx | Beta FW17 Q1/2023 | | 750-832/xxx-xxx | FW11 after BACnet certification | | 750-852 | FW17 Q1/2023 | | 750-862 | FW11 Q1/2023 | | 750-880/xxx-xxx | FW17 Q1/2023 | | 750-881 | FW17 Q1/2023 | | 750-882 | FW17 Q1/2023 | | 750-885/xxx-xxx | FW17 Q1/2023 | | 750-889 | FW17 Q1/2023 | | 750-890/xxx-xxx | FW11 Q1/2023 | | 750-891 | FW11 Q1/2023 | | 750-893 | FW11 Q1/2023 |
- BehobenNucleus NET for Nucleus PLUS V1cisa_csaf_ot
Update to V5.2a as available in Nucleus PLUS V1.15 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - BehobenNucleus NET for Nucleus PLUS V2cisa_csaf_ot
Update to V5.4 as available in Nucleus PLUS V2.1f and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/852852095/ - BehobenNucleus ReadyStart V3 V2012cisa_csaf_ot
Update to V2012.08.1 and apply the patch "v2022.11"
https://support.sw.siemens.com/en-US/product/1009925838/ - BehobenNucleus ReadyStart V3 V2017cisa_csaf_ot
Update to V2017.02.4 and apply the patch "2017.02.4_patch_CVE-2022-38371"
https://support.sw.siemens.com/en-US/product/1009925838/ - BehobenNucleus Source Codecisa_csaf_ot
Contact customer support to receive patch and update information
- BehobenAPOGEE PXC Compact (BACnet)cisa_csaf_ot
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (BACnet)cisa_csaf_ot
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
Update to V2.8.21 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenDesigo PXC00-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC00-Ucisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC001-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC100-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC12-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC128-Ucisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC200-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC22-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC22.1-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC36.1-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC50-E.Dcisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXC64-Ucisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenDesigo PXM20-Ecisa_csaf_ot
Update to V6.30.37 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987277/ - BehobenTALON TC Compact (BACnet)cisa_csaf_ot
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - BehobenTALON TC Modular (BACnet)cisa_csaf_ot
Update to V3.5.7 or later version
https://partnerportal.extranet.dc.siemens.com/ - MitigationNucleus NET for Nucleus PLUS V1siemens_psirt
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus NET for Nucleus PLUS V2siemens_psirt
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2012siemens_psirt
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2017siemens_psirt
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus Source Codesiemens_psirt
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationAPOGEE MBC (PPC) (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (P2 Ethernet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (P2 Ethernet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-Usiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC001-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC100-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC12-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC128-Usiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC200-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22.1-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC36.1-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC50-E.Dsiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC64-Usiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXM20-Esiemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Compact (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Modular (BACnet)siemens_psirt
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- Mitigationwago_psirt
If you enabled the FTP-Server, but you do not need FTP data transfer, you can deactivate the FTP Server over the product settings in the web-based management. As general security measures strongly WAGO recommends: 1. Use general security best practices to protect systems from local and network attacks. 2. Do not allow direct access to the device from untrusted networks. 3. Update to the latest firmware according to the table in chapter solutions. 4. Industrial control systems (ICS) should not be directly accessible from the Internet, but should be protected by consistently applying the defense-in-depth strategy. The BSI provides general information on securing ICS in the ICS Compendium (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/ICS/ICS-Security_compendium.pdf external link).
- MitigationNucleus NET for Nucleus PLUS V1cisa_csaf_ot
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus NET for Nucleus PLUS V2cisa_csaf_ot
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2012cisa_csaf_ot
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus ReadyStart V3 V2017cisa_csaf_ot
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationNucleus Source Codecisa_csaf_ot
Configure TCP_MAX_KEEPALIVES to a lower value such as 3. Additionally, configure TCP_KEEPALIVE_INTERVAL and TCP_KEEPALIVE_DELAY be set to 3 seconds. Rebuild your application.
- MitigationAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Compact (P2 Ethernet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationAPOGEE PXC Modular (P2 Ethernet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC00-Ucisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC001-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC100-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC12-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC128-Ucisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC200-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC22.1-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC36.1-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC50-E.Dcisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXC64-Ucisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationDesigo PXM20-Ecisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Compact (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- MitigationTALON TC Modular (BACnet)cisa_csaf_ot
Disable the FTP service (Note that the FTP service is disabled by default on APOGEE, Desigo, and TALON products.)
- Kein Fix geplantAPOGEE MBC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
- Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
- Kein Fix geplantAPOGEE MEC (PPC) (BACnet)siemens_psirt
Currently no fix is planned
- Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)siemens_psirt
Currently no fix is planned
- Kein Fix geplantAPOGEE MBC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantAPOGEE MBC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantAPOGEE MEC (PPC) (BACnet)cisa_csaf_ot
Currently no fix is planned
- Kein Fix geplantAPOGEE MEC (PPC) (P2 Ethernet)cisa_csaf_ot
Currently no fix is planned
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.6–8.7
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (160)
Betroffene Produkte und Versionsbereiche.
Advisories (5)
Hersteller- und Ökosystem-Meldungen dazu.
- SSA-313313SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS2022-10-11csaf · siemens_psirtDE
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
- SSA-935500SSA-935500: Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products2022-10-11csaf · siemens_psirtDE
A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use affected versions of the Nucleus software and inherently contain the vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
- VDE-2022-047WAGO: FTP-Server - Denial-of-Service2022-10-12csaf · wago_psirtDE
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server.See also: Siemens Advisory published October 11th, 2022 - SSA-313313
- ICSA-22-286-07Siemens Nucleus RTOS FTP Server2022-10-11icsa · cisa_csaf_otUS
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of the FTP server. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.
- ICSA-22-286-12Siemens APOGEE, TALON and Desigo PXC/PXM Products2022-10-11icsa · cisa_csaf_otUS
A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use affected versions of the Nucleus software and inherently contain the vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (17)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/security/cve/cve-2022-38371cnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-313313.htmlcnnvd
- https://cert-portal.siemens.com/productcert/html/ssa-935500.htmlcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-313313.pdfcnnvd
- https://cert-portal.siemens.com/productcert/pdf/ssa-935500.pdfcnnvd
- https://cxsecurity.com/cveshow/CVE-2022-38371/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-286-07cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-22-286-12cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan