ICSA-19-192-04 Siemens SIMATIC RF6XXR

Vulnerabilities 3

• Unscored —
  CVE-2011-3389 Public exploit EPSS 73%

  The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firef…

  asterisk curl bouncycastle nss Debian
  Sep 6, 2011
• Unscored —
  CVE-2013-0169 Public exploit EPSS 36%

  The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other produc…

  openssl bouncycastle nss gnutls28 Debian Ubuntu
  Feb 8, 2013
• Unscored —
  CVE-2016-6329

  OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday…

  openvpn Ubuntu
  Jan 31, 2017

Revision history

1. 2019-07-09 #1

   Publication Date

References

• SSA-556833: TLS Vulnerabilities in SIMATIC RF6XXR
  https://cert-portal.siemens.com/productcert/txt/ssa-556833.txt
• ICSA Advisory ICSA-19-192-04 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-192-04
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B