Medium SSA-669158 4 CVEs

SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400

Published Apr 13, 2021 · Updated Mar 8, 2022 · Revision 2

Vendor: Siemens Product: SIMOTICS CONNECT 400

Summary

SIMOTICS CONNECT 400 is affected by DNS Client vulnerabilities as initially reported in Siemens Security Advisory SSA-705111 (https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf) for the DNS Module in Nucleus RTOS.

Siemens has released updates for the SIMOTICS CONNECT 400 and recommends to update to the latest version.

Vulnerabilities 4

Medium 6.5

CVE-2020-27736

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

Siemens APOGEE PXC Modular (BACnet) TALON TC Compact (BACnet) APOGEE PXC Compact (P2 Ethernet) ICS / OT

Apr 22, 2021
Medium 6.5

CVE-2020-27737

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

Siemens APOGEE PXC Compact (P2 Ethernet) APOGEE PXC Modular (P2 Ethernet) TALON TC Modular (BACnet) ICS / OT

Apr 22, 2021
Medium 6.5

CVE-2020-27738

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT

Apr 22, 2021
Medium 5.3

CVE-2021-25677

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…

Siemens TALON TC Modular (BACnet) APOGEE PXC Compact (BACnet) APOGEE PXC Modular (BACnet) ICS / OT

Apr 22, 2021

Revision history

2022-03-08 #2
Added solution for CVE-2021-25677
2021-04-13 #1
Publication Date

References

SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf
SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-669158.txt