Summary
One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products:
- Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems
- Aeroderivative Gas Turbines SGT-A20, SGT-A35 and SGT-A65 with FT125 control systems
Vulnerabilities 1
-
Unscored —
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This v…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-553445.txt
-
SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-553445.pdf
-
ICS Advisory ICSA-21-222-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-222-06
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B