Summary
Siemens has released a new firmware version for SCALANCE X-200 and X-200 IRT switches that address Bad Alloc vulnerabilities in the underlying operating system and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.
Vulnerabilities 2
-
High 7.3
integer overflow in calloc
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corrupti…
-
Unscored —
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a …
Revision history
-
#2
Updated description and CVSS for CVE-2020-35198
-
#1
Publication Date
References
-
SSA-813746: BadAlloc Vulnerabilities in SCALANCE X-200, X-200IRT, and X-300 Switch Families - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-813746.html