Skip to content
OpenAdvisories
Medium SSA-238730 3 CVEs

SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4

Published Jun 11, 2024 · Updated Jun 11, 2024

Vendor: Siemens Product: SITOP UPS1600 10 A Ethernet/ PROFINET (6EP4134-3AB00-2AY0) Product: SITOP UPS1600 20 A Ethernet/ PROFINET (6EP4136-3AB00-2AY0) Product: SITOP UPS1600 40 A Ethernet/ PROFINET (6EP4137-3AB00-2AY0) Product: SITOP UPS1600 EX 20 A Ethernet PROFINET (6EP4136-3AC00-2AY0)

Summary

Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

Vulnerabilities 3

  • Medium 5.6
    CVE-2023-26552

    mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be…

    ntp ntp Debian Ubuntu
  • Medium 5.6
    CVE-2023-26553

    mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary m…

    ntp ntp Debian Ubuntu
  • Medium 5.6
    CVE-2023-26554

    mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may b…

    ntp ntp Debian Ubuntu

Revision history

  1. #1

    Publication Date

References