Skip to content
OpenAdvisories
High SSA-539476 2 CVEs

SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan

Published Feb 8, 2022 · Updated Mar 14, 2023 · Revision 5

Vendor: Siemens Product: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) Product: RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) Product: SCALANCE M804PB (6GK5804-0AP00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) Product: SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) Product: SCALANCE M874-2 (6GK5874-2AA00-2AA2) Product: SCALANCE M874-3 (6GK5874-3AA00-2AA2) Product: SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) Product: SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) Product: SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) Product: SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) Product: SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) Product: SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) Product: SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) Product: SCALANCE S615 (6GK5615-0AA00-2AA2) Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2) Product: SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) Product: SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) Product: SIMATIC CP 1243-7 LTE EU (6GK7243-7KX30-0XE0) Product: SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) Product: SIMATIC CP 1243-8 IRC (6GK7243-8RX30-0XE0) Product: SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) +12 more

Summary

Vulnerabilities in the third-party component strongSwan could allow an attacker to cause a denial of service (DoS) condition in affected devices by exploiting integer overflow bugs.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 2

Revision history

  1. #5

    Added fix for SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, and SIMATIC CP 1543SP-1

  2. #4

    Added fix for SIMATIC CP 1242-7 V2, CP 1243-7, CP 1243-1, CP 1243-8

  3. #3

    Added fix for SIMATIC CP 1545-1 and SINEMA Remote Connect Server

  4. #2

    Added solutions for SCALANCE S615, SCALANCE M-800 Family, SCALANCE MUM-800 Family, RUGGEDCOM RM1224 family, SIMATIC CP 1543-1, and SIPLUS NET CP 1543-1

  5. #1

    Publication Date

References