Skip to content
OpenAdvisories
High SSA-324955 1 CVE

SSA-324955: SAD DNS Attack in Linux Based Products

Published May 11, 2021 · Updated Mar 14, 2023 · Revision 11

Vendor: Siemens Product: RUGGEDCOM RM1224 family (6GK6108-4AM00) Product: SCALANCE M-800 family Product: SCALANCE S615 (6GK5615-0AA00-2AA2) Product: SCALANCE SC-600 Family Product: SCALANCE W1750D Product: SIMATIC Cloud Connect 7 CC712 (6GK1411-1AC00) Product: SIMATIC Cloud Connect 7 CC716 (6GK1411-5AC00) Product: SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Product: SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Product: SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Product: SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Product: SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Product: SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) Product: SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) Product: SIMATIC CP 1543-1 (incl. SIPLUS variants) Product: SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) Product: SIMATIC CP 1545-1 (6GK7545-1GX00-0XE0) Product: SIMATIC MV540 H (6GF3540-0GE10) Product: SIMATIC MV540 S (6GF3540-0CD10) Product: SIMATIC MV550 H (6GF3550-0GE10) Product: SIMATIC MV550 S (6GF3550-0CD10) Product: SIMATIC MV560 U (6GF3560-0LE10) Product: SIMATIC MV560 X (6GF3560-0HE10) Product: SINEMA Remote Connect Server Product: SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) Product: SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) Product: SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) Product: SIPLUS NET CP 1242-7 V2 (6AG1242-7KX31-7XE0) Product: SIPLUS S7-1200 CP 1243-1 (6AG1243-1BX30-2AX0) +3 more

Summary

A vulnerability made public under the name SAD DNS affects Domain Name
System resolvers due to a vulnerability in the Linux kernel when
handling ICMP packets. The Siemens products which are affected
are listed below. For more information please see
https://www.saddns.net/.
Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #11

    Added fix for SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, and SIMATIC CP 1543SP-1

  2. #10

    Added fix for SIMATIC CP 1243-1 and CP 1243-8 IRC

  3. #9

    Added fix for SIMATIC CP 1545-1

  4. #8

    Added solution for the SIMATIC MV500 family products

  5. #7

    Added solution for SIMATIC Cloud Connect 7 and TIM 1531 IRC, split TIM 1531 IRC into individual products, split SIMATIC Cloud Connect 7 into individual products

  6. #6

    Corrected wrong product name SIMATIC CP 1243-7 to SIMATIC CP 1242-7 GPRS V2, updated solution for SIMATIC CP 1243-7 LTE, added solution for SIMATIC CP 1242-7 GPRS V2 and SCALANCE W1750D

  7. #5

    Errata: Removed solution for TIM 1531 IRC as V2.2 did not fix the issue

  8. #4

    Added solution for SIMATIC NET CP 1543-1

  9. #3

    Added solution for SIMATIC NET CP 1243-7 LTE EU and SIMATIC NET CP 1243-7 LTE US

  10. #2

    Added solution for TIM 1531 IRC

  11. #1

    Publication Date

References