Summary
Devices of the LOGO! CMR family and the SIMATIC RTU 3000 family are affected by several vulnerabilities in the third party component Mbed TLS. They could allow an attacker with access to any of the interfaces of an affected device to impact the availability or to communicate with invalid certificates.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 2
-
Unscored —
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations perfo…
-
Unscored —
An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm param…
Revision history
-
#2
Added solution for devices of SIMATIC RTU 3000 family
-
#1
Publication Date
References
-
SSA-756638: Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf
-
SSA-756638: Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-756638.txt