Skip to content
OpenAdvisories
High SSA-732250 2 CVEs

SSA-732250: Libcurl Vulnerabilities in Industrial Devices

Published May 10, 2022 · Updated Aug 9, 2022 · Revision 3

Vendor: Siemens Product: LOGO! CMR family Product: RUGGEDCOM RM1224 LTE(4G) EU Product: RUGGEDCOM RM1224 LTE(4G) NAM Product: SCALANCE M804PB Product: SCALANCE M812-1 ADSL-Router (Annex A) Product: SCALANCE M812-1 ADSL-Router (Annex B) Product: SCALANCE M816-1 ADSL-Router (Annex A) Product: SCALANCE M816-1 ADSL-Router (Annex B) Product: SCALANCE M826-2 SHDSL-Router Product: SCALANCE M874-2 Product: SCALANCE M874-3 Product: SCALANCE M876-3 (EVDO) Product: SCALANCE M876-3 (ROK) Product: SCALANCE M876-4 (EU) Product: SCALANCE M876-4 (NAM) Product: SCALANCE MUM856-1 (EU) Product: SCALANCE MUM856-1 (RoW) Product: SCALANCE S615 Product: SIMATIC CP 1242-7 V2 Product: SIMATIC CP 1243-1 Product: SIMATIC CP 1243-7 LTE EU Product: SIMATIC CP 1243-7 LTE US Product: SIMATIC CP 1243-8 IRC Product: SIMATIC CP 1543-1 Product: SIMATIC CP 1545-1 Product: SIMATIC RTU3010C Product: SIMATIC RTU3030C Product: SIMATIC RTU3031C Product: SIMATIC RTU3041C +5 more

Summary

Vulnerabilities in third-party component cURL could allow an attacker
to interfere with the affected products in various ways. Siemens
has released updates for several affected products and recommends to
update to the latest versions. Siemens recommends countermeasures for
products where updates are not, or not yet available.

Vulnerabilities 2

Revision history

  1. #3

    Added SIMATIC CP 1242-7 V2, CP 1243-7, CP 1243-1, CP 1243-8 as affected products; no fix planned for LOGO! CMR family

  2. #2

    Added fix for SIMATIC CP 1545-1 and SINEMA Remote Connect Client

  3. #1

    Publication Date

References