Skip to content
OpenAdvisories
High ICSA-19-253-03 4 CVEs

ICSA-19-253-03_Siemens Industrial Products (Update P)

Published Sep 10, 2019 · Updated May 12, 2022 · Revision 19

Vendor: Siemens Product: CloudConnect 712 Product: ROX II Product: RUGGEDCOM APE 1404 Linux Product: RUGGEDCOM RM1224 (6GK6108-4AM00) Product: RUGGEDCOM RX 1400 VPE Debian Linux Product: RUGGEDCOM RX 1400 VPE Linux CloudConnect Product: SCALANCE M804PB (6GK5804-0AP00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) Product: SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) Product: SCALANCE M874-2 (6GK5874-2AA00-2AA2) Product: SCALANCE M874-3 (6GK5874-3AA00-2AA2) Product: SCALANCE M875 Product: SCALANCE M876-3 (6GK5876-3AA02-2BA2) Product: SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) Product: SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) Product: SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) Product: SCALANCE S602 Product: SCALANCE S612 Product: SCALANCE S615 (6GK5615-0AA00-2AA2) Product: SCALANCE S623 Product: SCALANCE S627-2M Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2) +78 more

Summary

Successful exploitation of these vulnerabilities could cause denial-of-service condition.

Vulnerabilities 4

  • High 7.5
    CVE-2019-11477 Public exploit EPSS 99%

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fi…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2019-11478 Public exploit EPSS 94%

    SACK can cause extensive memory use via fragmented resend queue

    Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of serv…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2019-11479 EPSS 91%

    Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fr…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2019-8460

    OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to…

Revision history

  1. #19

    ICSA-19-253-03 Siemens Industrial Products (Update R)

  2. #18

    ICSA-19-253-03 Siemens Industrial Products (Update Q)

  3. #17

    ICSA-19-253-03 Siemens Industrial Products (Update P)

  4. #16

    ICSA-19-253-03 Siemens Industrial Products (Update O)

  5. #15

    ICSA-19-253-03 Siemens Industrial Products (Update N)

  6. #14

    ICSA-19-253-03 Siemens Industrial Products (Update M)

  7. #13

    ICSA-19-253-03 Siemens Industrial Products (Update L)

  8. #12

    ICSA-19-253-03 Siemens Industrial Products (Update K)

  9. #11

    ICSA-19-253-03 Siemens Industrial Products (Update J)

  10. #10

    ICSA-19-253-03 Siemens Industrial Products (Update I)

  11. #9

    ICSA-19-253-03 Siemens Industrial Products (Update H)

  12. #8

    ICSA-19-253-03 Siemens Industrial Products (Update G)

  13. #7

    ICSA-19-253-03 Siemens Industrial Products (Update F)

  14. #6

    ICSA-19-253-03 Siemens Industrial Products (Update E)

  15. #5

    ICSA-19-253-03 Siemens Industrial Products (Update D)

  16. #4

    ICSA-19-253-03 Siemens Industrial Products (Update C)

  17. #3

    ICSA-19-253-03 Siemens Industrial Products (Update B)

  18. #2

    ICSA-19-253-03 Siemens Industrial Products (Update A)

  19. #1

    ICSA-19-253-03 Siemens Industrial Products

References