Description
An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device on the SCALANCE XM-400, XR-500 (All versions prior to v6.4).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SCALANCE XM-400, XR-500 | All versions prior to v6.4 | — |
Advisories 2
- ICSA-21-131-10 Siemens SCALANCE XM-400 and XR-500 Devices CISA ICS & IT advisories · May 6, 2025
- SSA-116379 SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices Siemens ProductCERT · May 11, 2021