Skip to content
OpenAdvisories
High SSA-647068 1 CVE

SSA-647068: Ripple20 in SIMATIC RTLS Gateways

Published Feb 13, 2024 · Updated Feb 13, 2024

Vendor: Siemens Product: SIMATIC RTLS Gateway RTLS4030G, CMIIT (6GT2701-5DB23) Product: SIMATIC RTLS Gateway RTLS4030G, ETSI (6GT2701-5DB03) Product: SIMATIC RTLS Gateway RTLS4030G, FCC (6GT2701-5DB13) Product: SIMATIC RTLS Gateway RTLS4030G, ISED (6GT2701-5DB33) Product: SIMATIC RTLS Gateway RTLS4430G, Chirp, ETSI, FCC, ISED, IP65 (6GT2701-5CB03)

Summary

SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab
“Ripple20” for the TCP/IP stack.
Siemens recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • Unscored —
    CVE-2020-11896 Public exploit EPSS 37%

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

Revision history

  1. #1

    Publication Date

References