Skip to content
OpenAdvisories
Critical SSA-211752 15 CVEs

SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA

Published Jun 8, 2021 · Updated Feb 8, 2022 · Revision 2

Vendor: Siemens Product: SIMATIC CP 443-1 OPC UA

Summary

All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP.

Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 15

  • Low 3.7
    CVE-2016-9042

    An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A sp…

    Talos Network Time Protocol ntp Debian
  • Unscored —
    CVE-2015-7705 EPSS 12%

    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7853 EPSS 12%

    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attacke…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-8138

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to bypass the origin timestamp validation via a pack…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-1547

    An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec…

    NTP Project NTPsec Project NTP NTPSec Debian Ubuntu
  • Unscored —
    CVE-2016-1548

    An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timest…

    NTP Project NTPsec Project NTP NTPSec Debian Ubuntu
  • Unscored —
    CVE-2016-1550

    An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5f…

    NTP Project NTPsec Project NTP NTPSec Debian Ubuntu
  • Unscored —
    CVE-2016-2518 EPSS 15%

    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-4953 EPSS 17%

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilizati…

    ntp Debian
  • Unscored —
    CVE-2016-4954 EPSS 13%

    The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial …

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-4955

    ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-var…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-4956 EPSS 16%

    ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and ti…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-7431

    NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp …

    ntp Debian
  • Unscored —
    CVE-2016-7433

    NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecifie…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2017-6458

    Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authent…

    ntp ntp Debian Ubuntu

Revision history

  1. #2

    No remediation planned for SIMATIC CP 443-1 OPC UA

  2. #1

    Publication Date

References