CVE-2024-6387

highPriorität · beachten · 77EPSS 0.995 · 100. PerzentilExploit · PoCCHDEEUNLRUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
96 exploits · PoC
Likely / severe?
99.5% (100th) EPSS
CVSS 8.1 · high
Is it mine?
612 products
Prüfe deine Angriffsfläche
Who says so?
15 sources
cnnvd · enisa_euvd · fstec_bdu · abb_psirt

EPSS · bewertet 2026-10-22

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenSINAMICS IIoT modulesiemens_psirt

    Update to V1.0 HF1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989288/
  • BehobenSINEMA Remote Connect Serversiemens_psirt

    Update to V3.2 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109974084/
  • BehobenSINUMERIK ONEsiemens_psirt

    Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • BehobenFirmware TruControl <1.60.0 installed on TruDiodetrumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruDisktrumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 2000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 5000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 6000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 7000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 8000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruMicro 9000trumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on TruPulsetrumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • BehobenFirmware TruControl <1.60.0 installed on redpowerDirecttrumpf_psirt

    Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00

  • Behobenmb_connect_line_psirt

    Update to latest firmware: 2.16.1 for mbCONNECT24/mymbCONNECT24 8.2.0 for mbNET/mbNET.rokey

  • Behobenwelotec_psirt

    Update egOS on affected products to version v1.5.4

  • Behobenhelmholz_psirt

    Update to latest firmware: * 2.16.1 for myREX24 V2/myREX24 V2 virtual * 8.2.0 for REX200/REX250

  • Behobenphoenix_contact_psirt

    Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.

  • Behobenpepperl_fuchs_psirt

    Update to the Firmware version 1.15.0.0. A firmware update will be made available shortly on the corresponding product page on the Pepper+Fuchs Homepage.

  • Behobenphoenix_contact_psirt

    Update to the latest 2024.0.6 LTS Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.

  • BehobenCisco Catalyst SD-WANcisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Catalyst SD-WAN Controllercisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenCisco Catalyst SD-WAN Managercisco_csaf

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • BehobenSINAMICS IIoT modulecisa_csaf_ot

    Update to V1.0 HF1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109989288/
  • BehobenSINEMA Remote Connect Servercisa_csaf_ot

    Update to V3.2 SP2 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109974084/
  • BehobenSINUMERIK ONEcisa_csaf_ot

    Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.

  • MitigationArctic ARC600 with firmware version>=3.4.10 to <=3.4.13abb_psirt

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARG600 with firmware version>=3.4.10 to <=3.4.13abb_psirt

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARP600 with firmware version>=3.4.10 to <=3.4.13abb_psirt

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARR600 with firmware version>=3.4.10 to <=3.4.13abb_psirt

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationIndustrial Edge Management OS (IEM-OS)siemens_psirt

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINAMICS IIoT modulesiemens_psirt

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINEMA Remote Connect Serversiemens_psirt

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINUMERIK ONEsiemens_psirt

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • Mitigationmb_connect_line_psirt

    Prevent all access to the sshd daemon listening on port 22.

  • Mitigationwelotec_psirt

    Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information

  • Mitigationhelmholz_psirt

    Prevent all access to the sshd daemon listening on port 22.

  • Mitigationphoenix_contact_psirt

    Access to the SSH server should be limited to trustworthy networks or peers.

  • MitigationIndustrial Edge Management OS (IEM-OS)cisa_csaf_ot

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINAMICS IIoT modulecisa_csaf_ot

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINEMA Remote Connect Servercisa_csaf_ot

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationSINUMERIK ONEcisa_csaf_ot

    Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks

  • MitigationArctic ARC600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARG600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARP600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationArctic ARR600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot

    The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix verfügbarSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot

    Currently no fix is available

  • Kein Fix geplantIndustrial Edge Management OS (IEM-OS)siemens_psirt

    Currently no fix is planned

  • Kein Fix geplantIndustrial Edge Management OS (IEM-OS)cisa_csaf_ot

    Currently no fix is planned

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.0
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.1–9

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 5.9
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · CISA US
v3.19criticalAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · secalert@redhat.com USAusnutzbarkeit 2.2 · Auswirkung 5.9
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Phoenix Contact PSIRT DE
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Pepperl+Fuchs PSIRT DE
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:Rsecondary · ABB PSIRT
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Helmholz PSIRT
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · MB connect line PSIRT
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · TRUMPF PSIRT
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Welotec PSIRT
v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · Cisco PSIRT US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-362USprimärCWE-362USCWE-362USCWE-362USCWE-362USCWE-362USCWE-362USCWE-362USCWE-362USCWE-362USCWE-364USCWE-364USCWE-364USCWE-364US
05

Exploits (96)

Öffentlicher Proof-of-Concept- und Exploit-Code.

06

betroffene Produkte (612)

Betroffene Produkte und Versionsbereiche.

20 von 612 angezeigt
07

Advisories (24)

Hersteller- und Ökosystem-Meldungen dazu.

  • 2NGA002427ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities2025-04-07csaf · abb_psirtCH

    ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of service or tampering with unencrypted traffic. An attacker who successfully exploited the OpenSSH vulnerability could run arbitrary code in the product with privileged user permissions. This could cause the product to stop, make the product inaccessible, or the attacker could take control of the product. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.

  • NCSC-2024-0272Kwetsbaarheid verholpen in OpenSSHNL2024-07-01csaf · ncsc_nlNL

    De ontwikkelaars van OpenSSH hebben een kwetsbaarheid verholpen in OpenSSH

  • NCSC-2024-0320Kwetsbaarheden verholpen in Apple MacOSNL2024-07-30csaf · ncsc_nlNL

    Apple heeft kwetsbaarheden verholpen in MacOS.

  • NCSC-2024-0362Kwetsbaarheden verholpen in Siemens productenNL2024-09-10csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.

  • NCSC-2024-0414Kwetsbaarheden verholpen in Oracle CommunicationsNL2024-10-17csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in diverse Communications producten en systemen.

  • NCSC-2025-0166Kwetsbaarheden verholpen in Fortinet productenNL2025-05-14csaf · ncsc_nlNL

    Fortinet heeft kwetsbaarheden verholpen in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiSwitchManager en FortiWeb.

  • NCSC-2025-0187Kwetsbaarheden verholpen in Siemens productenNL2025-06-10csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als RUGGEDCOM, SCALANCE, SIMATIC en Tecnomatix

  • SSA-082556SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.52025-06-10csaf · siemens_psirtDE

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.

  • SSA-446545SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products2024-09-10csaf · siemens_psirtDE

    An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

  • VDE-2024-040Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities2024-06-25csaf · trumpf_psirtDE

    TruControl laser control software prior to version 1.60.0 uses an OpenSSH server version affected by CVE-2024-6387. The affected OpenSSH Server version could potentially lead to a remote code execution.

  • VDE-2024-042MB connect line: Multiple products are vulnerable to regreSSHion2023-08-17csaf · mb_connect_line_psirtDE

    Several Red Lion Europe products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".

  • VDE-2024-043Welotec: Multiple products are vulnerable to regreSSHion2024-08-22csaf · welotec_psirtDE

    Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.

  • VDE-2024-044Helmholz: Multiple products are vulnerable to regreSSHion2024-07-31csaf · helmholz_psirtDE

    Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".

  • VDE-2024-051Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH2024-09-10csaf · phoenix_contact_psirtDE

    mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.

  • VDE-2024-063PEPPERL+FUCHS: Multiple products are affected by regreSSHion2024-10-08csaf · pepperl_fuchs_psirtDE

    The affected devices run a SSH server that is affected by the regreSSHion vulnerability despite the fact that no user can actually log in through SSH. Attackers may exploit this vulnerability to gain root access to the device.

  • VDE-2024-071Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2024-12-09csaf · phoenix_contact_psirtDE

    Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS

  • WID-SEC-W-2024-1486OpenSSH: Schwachstelle ermöglicht CodeausführungDeutsch2024-06-30csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.

  • WID-SEC-W-2024-1725Apple macOS: Mehrere SchwachstellenDeutsch2024-07-29csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code mit Administratorrechten auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu modifizieren, den Benutzer zu täuschen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.

  • WID-SEC-W-2024-3195Oracle Communications: Mehrere SchwachstellenDeutsch2024-10-15csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • WID-SEC-W-2026-1208Oracle Systems: Mehrere SchwachstellenDeutsch2026-04-21csaf · cert_bundDE

    Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Systems ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

  • cisco-sa-openssh-rce-2024Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 20242024-07-02csaf · cisco_csafUS

    On July 1, 2024, the Qualys Threat Research Unit (TRU) disclosed an unauthenticated, remote code execution vulnerability that affects the OpenSSH server (sshd) in glibc-based Linux systems. CVE-2024-6387: A signal handler race condition was found in sshd, where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then the sshd SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). For a description of this vulnerability, see the Qualys Security Advisory ["https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"].

  • ICSA-24-256-15Siemens Industrial Products2024-09-10icsa · cisa_csaf_otUS

    An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

  • ICSA-25-100-09ABB Arctic Wireless Gateways2025-04-07icsa · cisa_csaf_otUS

    ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of service or tampering with unencrypted traffic. An attacker who successfully exploited the OpenSSH vulnerability could run arbitrary code in the product with privileged user permissions. This could cause the product to stop, make the product inaccessible, or the attacker could take control of the product. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.

  • ICSA-25-162-05Siemens SIMATIC S7-1500 CPU family2025-06-10icsa · cisa_csaf_otUS

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.

08

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

09

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduabb_psirtcert_bundncsc_nlsiemens_psirttrumpf_psirtmb_connect_line_psirtwelotec_psirthelmholz_psirtphoenix_contact_psirtpepperl_fuchs_psirtcisco_csafcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2024-07-01geändert 2026-09-02
11

Referenzen (162)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan