Skip to content
OpenAdvisories
High SSA-979775 1 CVE

SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices

Published Mar 9, 2021 · Updated Apr 13, 2021 · Revision 2

Vendor: Siemens Product: RUGGEDCOM RM1224 Product: SCALANCE M-800 Product: SCALANCE S615 Product: SCALANCE SC-600 Family Product: SCALANCE XB-200 Product: SCALANCE XC-200 Product: SCALANCE XF-200BA Product: SCALANCE XM400 Product: SCALANCE XP-200 Product: SCALANCE XR-300WG Product: SCALANCE XR500

Summary

Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the affected devices.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Revision history

  1. #2

    Added solution for SCALANCE M-800/S615 and RUGGEDCOM RM1224; updated solution for SCALANCE XR-300WG

  2. #1

    Publication Date

References