Skip to content
OpenAdvisories
Critical SSA-560465 1 CVE

SSA-560465: DHCP Client Vulnerability in VxWorks-based Industrial Products

Published Jul 13, 2021 · Updated May 10, 2022 · Revision 3

Vendor: Siemens Product: RUGGEDCOM WIN5100 series subscriber unit Product: RUGGEDCOM WIN5200 series subscriber unit Product: SCALANCE X200-4P IRT Product: SCALANCE X201-3P IRT Product: SCALANCE X201-3P IRT PRO Product: SCALANCE X202-2IRT Product: SCALANCE X202-2P IRT Product: SCALANCE X202-2P IRT PRO Product: SCALANCE X204-2 Product: SCALANCE X204-2FM Product: SCALANCE X204-2LD Product: SCALANCE X204-2LD TS Product: SCALANCE X204-2TS Product: SCALANCE X204IRT Product: SCALANCE X204IRT PRO Product: SCALANCE X206-1 Product: SCALANCE X206-1LD Product: SCALANCE X208 Product: SCALANCE X208PRO Product: SCALANCE X212-2 Product: SCALANCE X212-2LD Product: SCALANCE X216 Product: SCALANCE X224 Product: SCALANCE X302-7 EEC (230V, coated) Product: SCALANCE X302-7 EEC (230V) Product: SCALANCE X302-7 EEC (24V, coated) Product: SCALANCE X302-7 EEC (24V) Product: SCALANCE X302-7 EEC (2x 230V, coated) Product: SCALANCE X302-7 EEC (2x 230V) +55 more

Summary

Various industry products are affected by a DHCP client vulnerability in Wind River VxWorks, that could allow an attacker to cause a heap-based buffer overflow.

Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

Vulnerabilities 1

  • Unscored —
    CVE-2021-29998

    An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.

Revision history

  1. #3

    ERRATA: Removed solution for SCALANCE X-300/X408 family

  2. #2

    Clarified that no remediation is planned for some products; Clarified product names; Added SIMATIC RF180C; Added solution for SCALANCE X-300/X408 family

  3. #1

    Publication Date

References