Medium ICSA-17-318-01 10 CVEs

ICSA-17-318-01_Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)

Published Nov 14, 2017 · Updated Apr 9, 2019 · Revision 7

Vendor: Siemens Product: RUGGEDCOM RS9xxW Product: RUGGEDCOM RX1400 with WLAN interface Product: SCALANCE W-700 (IEEE 802.11a/b/g) Product: SCALANCE W-700 (IEEE 802.11n) Product: SCALANCE W1750D Product: SCALANCE WLC711 Product: SCALANCE WLC712 Product: SIMATIC ET200 PRO IM154-6 PN IWLAN Product: SIMATIC IWLAN-PB/LINK Product: SIMATIC Mobile Panel 277(F) IWLAN Product: SIMATIC RF350M Product: SIMATIC RF650M Product: SINAMICS v20 Smart Access Module

Summary

Mathy Vanhoef, of the Katholieke Universiteit Leuven in Belgium, discovered these vulnerabilities.

Vulnerabilities 10

Unscored —

CVE-2017-13077

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) durin…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handsha…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux linux-firmware Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13081

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux-firmware wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (P…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13084

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) d…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa Debian

Oct 17, 2017
Unscored —

CVE-2017-13086

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) dur…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13087

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when p…

wpa wpa wpa_supplicant hostapd Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13088

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (I…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017

Revision history

2019-04-09 #7
ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update F)
2018-11-13 #6
ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update E)
2018-04-24 #5
ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update D)
2018-01-25 #4
ICSA-17-318-01C Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update C)
2017-12-19 #3
ICSA-17-318-01B Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update B)
2017-12-05 #2
ICSA-17-318-01A Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products (Update A)
2017-11-14 #1
ICSA-17-318-01 Siemens SCALANCE, SIMATIC, RUGGEDCOM, and SINAMICS Products

References

ICS Advisory ICSA-17-318-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-318-01