Skip to content
OpenAdvisories
Medium SSA-145224 1 CVE

SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices

Published Jun 14, 2022 · Updated Jun 14, 2022

Vendor: Siemens Product: SCALANCE XM408-4C Product: SCALANCE XM408-4C (L3 int.) Product: SCALANCE XM408-8C Product: SCALANCE XM408-8C (L3 int.) Product: SCALANCE XM416-4C Product: SCALANCE XM416-4C (L3 int.) Product: SCALANCE XR524-8C, 1x230V Product: SCALANCE XR524-8C, 1x230V (L3 int.) Product: SCALANCE XR524-8C, 24V Product: SCALANCE XR524-8C, 24V (L3 int.) Product: SCALANCE XR524-8C, 2x230V Product: SCALANCE XR524-8C, 2x230V (L3 int.) Product: SCALANCE XR526-8C, 1x230V Product: SCALANCE XR526-8C, 1x230V (L3 int.) Product: SCALANCE XR526-8C, 24V Product: SCALANCE XR526-8C, 24V (L3 int.) Product: SCALANCE XR526-8C, 2x230V Product: SCALANCE XR526-8C, 2x230V (L3 int.) Product: SCALANCE XR528-6M Product: SCALANCE XR528-6M (2HR2, L3 int.) Product: SCALANCE XR528-6M (2HR2) Product: SCALANCE XR528-6M (L3 int.) Product: SCALANCE XR552-12M Product: SCALANCE XR552-12M (2HR2, L3 int.) Product: SCALANCE XR552-12M (2HR2)

Summary

SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #1

    Publication Date

References