Skip to content
OpenAdvisories
Medium SSA-772220 1 CVE

SSA-772220: OpenSSL Vulnerabilities in Industrial Products

Published Jul 13, 2021 · Updated Jan 9, 2024 · Revision 14

Vendor: Siemens Product: RUGGEDCOM CROSSBOW Station Access Controller (SAC) Product: RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) Product: RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) Product: SCALANCE LPE9403 (6GK5998-3GS00-2AC2) Product: SCALANCE M804PB (6GK5804-0AP00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2) Product: SCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2) Product: SCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2) Product: SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) Product: SCALANCE M874-2 (6GK5874-2AA00-2AA2) Product: SCALANCE M874-3 (6GK5874-3AA00-2AA2) Product: SCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2) Product: SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) Product: SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) Product: SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) Product: SCALANCE S602 Product: SCALANCE S612 Product: SCALANCE S615 (6GK5615-0AA00-2AA2) Product: SCALANCE S623 Product: SCALANCE S627-2M Product: SCALANCE SC622-2C (6GK5622-2GS00-2AC2) Product: SCALANCE SC632-2C (6GK5632-2GS00-2AC2) Product: SCALANCE SC636-2C (6GK5636-2GS00-2AC2) Product: SCALANCE SC642-2C (6GK5642-2GS00-2AC2) Product: SCALANCE SC646-2C (6GK5646-2GS00-2AC2) Product: SCALANCE W-700 IEEE 802.11n family Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) Product: SCALANCE W1748-1 M12 (6GK5748-1GY01-0TA0) +66 more

Summary

OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows
an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

[0]
https://www.openssl.org/news/secadv/20210325.txt

Vulnerabilities 1

  • Medium 5.9
    CVE-2021-3449 Public exploit EPSS 64%

    NULL pointer deref in signature_algorithms processing

    An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a si…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io

Revision history

  1. #14

    Added fix for SIMATIC WinCC TeleControl

  2. #13

    Updated fix information for RUGGEDCOM CROSSBOW SAC, added fix for SIMATIC CP 1542SP-1 IRC, and SIMATIC CP 1543SP-1

  3. #12

    Added or corrected fix information for SIMATIC CP 1242-7 V2, CP 1243-7, CP 1243-1, CP 1243-8

  4. #11

    Added fix for SIMATIC CP 1545-1

  5. #10

    Added solution for SIMATIC READER RF1xxC family and SIMATIC Reader RF360R and SIMATIC PCS 7 TeleControl

  6. #9

    No fix planned for SINAMICS Connect 300; Added solution for SCALANCE M-800 / S615 family, RUGGEDCOM RM1224, and SCALANCE W-1700 IEEE 802.11ac family; Added SIMATIC RF600R family

  7. #8

    Added solution for SIMATIC S7-1200 CPU family

  8. #7

    Added solution for SCALANCE LPE9403; clarified that no remediation is planned for SCALANCE W-1700 IEEE 802.11ac family; added RUGGEDCOM CROSSBOW Station Access Controller as affected product ; fixed affected versions for SINEC NMS

  9. #6

    Added solution for SIMATIC HMI Panels, SIMATIC Logon and SIMATIC PDM, clarified that no remediation is planned for SCALANCE W-700 IEEE 802.11n family

  10. #5

    Added solution for SIMATIC MV500 family and SINUMERIK OPC UA Server

  11. #4

    Added solution for SCALANCE SC-600, SIMATIC WinCC Runtime Advanced, SIMATIC CP 1242-7 GPRS V2, SIMATIC CP 1243-7 LTE and SIMATIC Cloud Connect 7; split SCALANCE SC-600 into individual products; removed SINEC PNI as it is not affected

  12. #3

    Added solution for SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC PCS neo, SIMATIC Process Historian OPC UA Server, SINEMA Server, and TIA Administrator, removed SIMATIC HMI Basic Panels 2nd Generation as the product is not affected

  13. #2

    Removed RUGGEDCOM CloudConnect APE/VPE as it is not affected, added solution for SIMATIC NET CP 1543-1

  14. #1

    Publication Date

References