Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-7461 (GCVE-0-2020-7461)
Vulnerability from cvelistv5 – Published: 2021-03-26 20:55 – Updated: 2024-08-04 09:25
VLAI?
EPSS
Summary
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.
Severity ?
No CVSS data available.
CWE
- Heap-based Buffer Overflow
Assigner
References
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T09:25:49.113Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FreeBSD",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-14T12:06:27",
"orgId": "63664ac6-956c-4cba-a5d0-f46076e16109",
"shortName": "freebsd"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secteam@freebsd.org",
"ID": "CVE-2020-7461",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "FreeBSD",
"version": {
"version_data": [
{
"version_value": "FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Heap-based Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc",
"refsource": "MISC",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109",
"assignerShortName": "freebsd",
"cveId": "CVE-2020-7461",
"datePublished": "2021-03-26T20:55:08",
"dateReserved": "2020-01-21T00:00:00",
"dateUpdated": "2024-08-04T09:25:49.113Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"F35957CE-AF9F-40CA-BDD1-FA6A0E73783F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA929713-B797-494A-853D-C121D9D69519\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*\", \"matchCriteriaId\": \"B87AF171-95AC-4DDA-8D94-694F85638B46\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*\", \"matchCriteriaId\": \"1CC8B031-41BB-4846-B092-7E4BC6F35D6B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*\", \"matchCriteriaId\": \"83E34012-BC9D-4F0C-AAE1-FE5767B4EED6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*\", \"matchCriteriaId\": \"3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*\", \"matchCriteriaId\": \"EA5006FF-06A5-4D95-BF5B-29F26248D11F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*\", \"matchCriteriaId\": \"A705031B-FD63-4076-B92E-E826E11D7111\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*\", \"matchCriteriaId\": \"11C1EFB1-68E5-45F4-A7E1-744574F290D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*\", \"matchCriteriaId\": \"25F649A7-9265-4552-8934-BCE083363982\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*\", \"matchCriteriaId\": \"F202C856-5B95-4796-AC4A-1F210E7BAB8F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*\", \"matchCriteriaId\": \"9419C866-C478-4CDE-A9A1-E592D8FF0933\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*\", \"matchCriteriaId\": \"2B6DFC23-A7A1-431A-9AD9-A820579F95F0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"4A865EA1-01D7-4E5A-9D13-80780F8A9D7A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"9FCA6A72-2A72-45FD-A43D-B5BF7C329121\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*\", \"matchCriteriaId\": \"90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"BD730B6A-F123-4685-ACB3-4F20AAAB77F3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*\", \"matchCriteriaId\": \"508150E3-2C0C-4EEB-BFC9-BB5CEB404C06\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*\", \"matchCriteriaId\": \"B5D692EF-A5D7-430E-91BA-4CD137343B66\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*\", \"matchCriteriaId\": \"D50C60A7-4C9F-4636-92E9-9F5B8B01BE5B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*\", \"matchCriteriaId\": \"6C49F6C7-A740-42F4-93BB-512CBF334516\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*\", \"matchCriteriaId\": \"402740C4-5B55-423F-BAD2-F742E1E21ADC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*\", \"matchCriteriaId\": \"9DCAA10A-C612-45E0-84B7-55897F49D65E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*\", \"matchCriteriaId\": \"CB6258A5-8066-48B8-A417-09A1547DD57A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*\", \"matchCriteriaId\": \"6601C7C4-EC36-4EAA-90AC-D3156A2BF330\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_rf350m_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5B60EA5E-219D-44E8-800B-97AB739B5895\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_rf350m:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E4B5DF0A-2850-4BFA-B110-36F2BE323A28\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_rf650m_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B1DF7FC-EE60-48EE-8301-B8BDED3FD33E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_rf650m:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7DAE6641-16B6-4B41-B170-DAB51DF5AEC2\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.\"}, {\"lang\": \"es\", \"value\": \"En FreeBSD versiones 12.1-STABLE anteriores a r365010, 11.4-STABLE anteriores a r365011, 12.1-RELEASE anteriores a p9, 11.4-RELEASE anteriores a p3 y 11.3-RELEASE anteriores a p13, dhclient(8) no puede manejar determinadas entradas malformadas relacionadas con el manejo de la opci\\u00f3n 119 de DHCP resultando en un desbordamiento de la pila.\u0026#xa0;En principio, el desbordamiento de la pila podr\\u00eda explotarse para lograr una ejecuci\\u00f3n de c\\u00f3digo remota.\u0026#xa0;El proceso afectado se ejecuta con privilegios reducidos en un sandbox Capsicum, limitando el impacto inmediato de una explotaci\\u00f3n.\"}]",
"id": "CVE-2020-7461",
"lastModified": "2024-11-21T05:37:11.450",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.4}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2021-03-26T21:15:13.053",
"references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf\", \"source\": \"secteam@freebsd.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc\", \"source\": \"secteam@freebsd.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "secteam@freebsd.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-7461\",\"sourceIdentifier\":\"secteam@freebsd.org\",\"published\":\"2021-03-26T21:15:13.053\",\"lastModified\":\"2024-11-21T05:37:11.450\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.\"},{\"lang\":\"es\",\"value\":\"En FreeBSD versiones 12.1-STABLE anteriores a r365010, 11.4-STABLE anteriores a r365011, 12.1-RELEASE anteriores a p9, 11.4-RELEASE anteriores a p3 y 11.3-RELEASE anteriores a p13, dhclient(8) no puede manejar determinadas entradas malformadas relacionadas con el manejo de la opci\u00f3n 119 de DHCP resultando en un desbordamiento de la pila.\u0026#xa0;En principio, el desbordamiento de la pila podr\u00eda explotarse para lograr una ejecuci\u00f3n de c\u00f3digo remota.\u0026#xa0;El proceso afectado se ejecuta con privilegios reducidos en un sandbox Capsicum, limitando el impacto inmediato de una explotaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"F35957CE-AF9F-40CA-BDD1-FA6A0E73783F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA929713-B797-494A-853D-C121D9D69519\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"B87AF171-95AC-4DDA-8D94-694F85638B46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"1CC8B031-41BB-4846-B092-7E4BC6F35D6B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"83E34012-BC9D-4F0C-AAE1-FE5767B4EED6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA5006FF-06A5-4D95-BF5B-29F26248D11F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A705031B-FD63-4076-B92E-E826E11D7111\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"11C1EFB1-68E5-45F4-A7E1-744574F290D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"25F649A7-9265-4552-8934-BCE083363982\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F202C856-5B95-4796-AC4A-1F210E7BAB8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"9419C866-C478-4CDE-A9A1-E592D8FF0933\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B6DFC23-A7A1-431A-9AD9-A820579F95F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"4A865EA1-01D7-4E5A-9D13-80780F8A9D7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FCA6A72-2A72-45FD-A43D-B5BF7C329121\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD730B6A-F123-4685-ACB3-4F20AAAB77F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"508150E3-2C0C-4EEB-BFC9-BB5CEB404C06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5D692EF-A5D7-430E-91BA-4CD137343B66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"D50C60A7-4C9F-4636-92E9-9F5B8B01BE5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"6C49F6C7-A740-42F4-93BB-512CBF334516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"402740C4-5B55-423F-BAD2-F742E1E21ADC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"9DCAA10A-C612-45E0-84B7-55897F49D65E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB6258A5-8066-48B8-A417-09A1547DD57A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"6601C7C4-EC36-4EAA-90AC-D3156A2BF330\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_rf350m_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B60EA5E-219D-44E8-800B-97AB739B5895\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_rf350m:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4B5DF0A-2850-4BFA-B110-36F2BE323A28\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_rf650m_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B1DF7FC-EE60-48EE-8301-B8BDED3FD33E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_rf650m:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DAE6641-16B6-4B41-B170-DAB51DF5AEC2\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf\",\"source\":\"secteam@freebsd.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc\",\"source\":\"secteam@freebsd.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
ICSA-21-257-11
Vulnerability from csaf_cisa - Published: 2021-09-14 00:00 - Updated: 2025-05-06 06:00Summary
Siemens SIMATIC RFID
Notes
Summary
A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code.
Siemens recommends specific countermeasures for products.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Multiple
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"organization": "Siemens ProductCERT",
"summary": "reporting this vulnerability to CISA."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"notes": [
{
"category": "summary",
"text": "A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code.\n\nSiemens recommends specific countermeasures for products.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Multiple",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-288459.json"
},
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-288459.txt"
},
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-21-257-11 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-257-11.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-21-257-11 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-257-11"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens SIMATIC RFID",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-21-257-11",
"initial_release_date": "2021-09-14T00:00:00.000000Z",
"revision_history": [
{
"date": "2021-09-14T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC RF350M",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "SIMATIC RF350M"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC RF650M",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "SIMATIC RF650M"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-7461",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
"references": [
{
"summary": "CVE-2020-7461 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2020-7461.json"
}
],
"remediations": [
{
"category": "none_available",
"details": "Currently no remediation is available",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "mitigation",
"details": "Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
},
{
"category": "workaround",
"details": "Protect network access to affected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002"
]
}
],
"title": "CVE-2020-7461"
}
]
}
GSD-2020-7461
Vulnerability from gsd - Updated: 2023-12-13 01:21Details
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2020-7461",
"description": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.",
"id": "GSD-2020-7461"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-7461"
],
"details": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.",
"id": "GSD-2020-7461",
"modified": "2023-12-13T01:21:51.383617Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secteam@freebsd.org",
"ID": "CVE-2020-7461",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "FreeBSD",
"version": {
"version_data": [
{
"version_value": "FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Heap-based Buffer Overflow"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc",
"refsource": "MISC",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf",
"refsource": "MISC",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_rf350m_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_rf350m:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_rf650m_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:siemens:simatic_rf650m:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secteam@freebsd.org",
"ID": "CVE-2020-7461"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"name": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf",
"refsource": "MISC",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
},
"lastModifiedDate": "2021-09-16T16:03Z",
"publishedDate": "2021-03-26T21:15Z"
}
}
}
CERTFR-2021-AVI-706
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SINEMA Server versions antérieures à V14 SP3 | ||
| Siemens | N/A | SIMATIC CP 1543-1 (incl. SIPLUS variants) versions antérieures à V3.0 | ||
| Siemens | N/A | SCALANCE X212-2LD versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X202-2 IRT toutes versions | ||
| Siemens | N/A | Desigo CC V4.0 toutes versions | ||
| Siemens | N/A | TALON TC Modular (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE X204-2FM versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X320-1 FE toutes versions | ||
| Siemens | N/A | LOGO! CMR2040 versions antérieures à V2.2 | ||
| Siemens | N/A | SIMATIC RF350M toutes versions | ||
| Siemens | N/A | SCALANCE X308-2 (incl. SIPLUS NET variant) toutes versions | ||
| Siemens | N/A | Desigo CC Compact V5.0 versions antérieures à V5.0 QU1 | ||
| Siemens | N/A | SCALANCE XF204 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XF204-2BA IRT toutes versions | ||
| Siemens | N/A | SINEMA Remote Connect Server versions antérieures à V3.0 SP2 | ||
| Siemens | N/A | Teamcenter Active Workspace V5.1 versions antérieures à V5.1.5 | ||
| Siemens | N/A | SCALANCE X307-3LD toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1511 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X204-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XR324-4M EEC toutes versions | ||
| Siemens | N/A | SCALANCE X224 versions antérieures à V5.2.5 | ||
| Siemens | N/A | Desigo CC V5.0 versions antérieures à V5.0 QU1 | ||
| Siemens | N/A | Teamcenter V13.0 versions antérieures à V13.0.0.7 | ||
| Siemens | N/A | SCALANCE X204 IRT PRO toutes versions | ||
| Siemens | N/A | TALON TC Compact (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | Simcenter STAR-CCM+ Viewer versions antérieures à V2021.2.1 | ||
| Siemens | N/A | Teamcenter Active Workspace V4.3 versions antérieures à V4.3.10 | ||
| Siemens | N/A | Cerberus DMS V4.0 toutes versions | ||
| Siemens | N/A | APOGEE MEC (PPC) (P2 Ethernet) toutes versions >= V2.6.3 | ||
| Siemens | N/A | SIMATIC CP 443-1 (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE X310FE toutes versions | ||
| Siemens | N/A | SCALANCE X206-1 versions antérieures à V5.2.5 | ||
| Siemens | N/A | RUGGEDCOM ROX MX5000 versions antérieures à V2.14.1 | ||
| Siemens | N/A | Desigo CC Compact V4.2 toutes versions | ||
| Siemens | N/A | Desigo CC Compact V4.1 toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1500 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X208 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X306-1LD FE toutes versions | ||
| Siemens | N/A | SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | Siveillance Control Pro toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1501 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X202-2P IRT (incl. SIPLUS NET variant) toutes versions | ||
| Siemens | N/A | SINEC NMS versions antérieures à V1.0 SP1 | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP200 toutes versions | ||
| Siemens | N/A | SCALANCE X307-2 EEC toutes versions | ||
| Siemens | N/A | Cerberus DMS V4.1 toutes versions | ||
| Siemens | N/A | SIMATIC RTU 3000 family toutes versions | ||
| Siemens | N/A | SCALANCE X202-2P IRT PRO toutes versions | ||
| Siemens | N/A | LOGO! CMR2020 versions antérieures à V2.2 | ||
| Siemens | N/A | Operation Scheduler toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | SCALANCE X208PRO versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X408-2 toutes versions | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP300 versions antérieures à V8.80 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1400 versions antérieures à V2.14.1 | ||
| Siemens | N/A | APOGEE PXC Modular (P2 Ethernet) toutes versions >= V2.8 | ||
| Siemens | N/A | SIMATIC RF650M toutes versions | ||
| Siemens | N/A | SIMATIC CP 1545-1 toutes versions | ||
| Siemens | N/A | NX 1980 Series versions antérieures à V1984 | ||
| Siemens | N/A | SCALANCE X302-7 EEC toutes versions | ||
| Siemens | N/A | Desigo CC toutes versions with OIS Extension Module | ||
| Siemens | N/A | SCALANCE X308-2M PoE toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 Lean (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX5000 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE XR324-12M TS toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 ERPC toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1524 versions antérieures à V2.14.1 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1510 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP100 versions antérieures à V8.80 | ||
| Siemens | N/A | SCALANCE X200-4P IRT toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE XF201-3P IRT toutes versions | ||
| Siemens | N/A | SCALANCE X201-3P IRT PRO toutes versions | ||
| Siemens | N/A | Simcenter Femap V2021.1 toutes versions | ||
| Siemens | N/A | APOGEE PXC Compact (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE X310 toutes versions | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP050 versions antérieures à V8.80 | ||
| Siemens | N/A | SCALANCE X308-2M toutes versions | ||
| Siemens | N/A | SCALANCE XF208 versions antérieures à V5.2.5 | ||
| Siemens | N/A | Teamcenter V12.4 versions antérieures à V12.4.0.8 | ||
| Siemens | N/A | Desigo CC V4.2 toutes versions | ||
| Siemens | N/A | SCALANCE X206-1LD versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XR324-12M toutes versions | ||
| Siemens | N/A | SCALANCE X216 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X308-2M TS toutes versions | ||
| Siemens | N/A | SCALANCE XF206-1 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X320-1-2LD FE toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1536 versions antérieures à V2.14.1 | ||
| Siemens | N/A | APOGEE PXC Modular (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE XR324-4M PoE TS toutes versions | ||
| Siemens | N/A | APOGEE PXC Compact (P2 Ethernet) toutes versions >= V2.8 | ||
| Siemens | N/A | GMA-Manager toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | APOGEE MBC (PPC) (P2 Ethernet) toutes versions >= V2.6.3 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1512 versions antérieures à V2.14.1 | ||
| Siemens | N/A | Desigo CC V4.1 toutes versions | ||
| Siemens | N/A | SCALANCE X304-2FE toutes versions | ||
| Siemens | N/A | SCALANCE XF202-2P IRT toutes versions | ||
| Siemens | N/A | SCALANCE X308-2LH toutes versions | ||
| Siemens | N/A | Desigo CC Compact V4.0 toutes versions | ||
| Siemens | N/A | Industrial Edge Management versions antérieures à V1.3 | ||
| Siemens | N/A | Teamcenter V13.2 versions antérieures à 13.2.0.2 | ||
| Siemens | N/A | SCALANCE X204-2TS versions antérieures à V5.2.5 | ||
| Siemens | N/A | Cerberus DMS V4.2 toutes versions | ||
| Siemens | N/A | SCALANCE X204-2LD (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X204-2LD TS versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X308-2LH+ toutes versions | ||
| Siemens | N/A | SCALANCE X204 IRT toutes versions | ||
| Siemens | N/A | SCALANCE X308-2LD toutes versions | ||
| Siemens | N/A | SCALANCE X201-3P IRT toutes versions | ||
| Siemens | N/A | SCALANCE XR324-4M PoE toutes versions | ||
| Siemens | N/A | Teamcenter Active Workspace V5.0 versions antérieures à V5.0.8 | ||
| Siemens | N/A | SCALANCE X307-3 toutes versions | ||
| Siemens | N/A | Teamcenter V13.1 versions antérieures à V13.1.0.5 | ||
| Siemens | N/A | Cerberus DMS V5.0 versions antérieures à v5.0 QU1 | ||
| Siemens | N/A | SCALANCE XF204 IRT toutes versions | ||
| Siemens | N/A | Simcenter Femap V2020.2 toutes versions | ||
| Siemens | N/A | SCALANCE X212-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | Siveillance Control toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | Teamcenter Active Workspace V5.2 versions antérieures à V5.2.1 | ||
| Siemens | N/A | SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE XF204-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SINEMA Server versions ant\u00e9rieures \u00e0 V14 SP3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1543-1 (incl. SIPLUS variants) versions ant\u00e9rieures \u00e0 V3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X212-2LD versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TALON TC Modular (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2FM versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X320-1 FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "LOGO! CMR2040 versions ant\u00e9rieures \u00e0 V2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RF350M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2 (incl. SIPLUS NET variant) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V5.0 versions ant\u00e9rieures \u00e0 V5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204-2BA IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SINEMA Remote Connect Server versions ant\u00e9rieures \u00e0 V3.0 SP2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.1 versions ant\u00e9rieures \u00e0 V5.1.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-3LD toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1511 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X224 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V5.0 versions ant\u00e9rieures \u00e0 V5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.0 versions ant\u00e9rieures \u00e0 V13.0.0.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204 IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TALON TC Compact (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter STAR-CCM+ Viewer versions ant\u00e9rieures \u00e0 V2021.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V4.3 versions ant\u00e9rieures \u00e0 V4.3.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE MEC (PPC) (P2 Ethernet) toutes versions \u003e= V2.6.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 443-1 (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X310FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X206-1 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX MX5000 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1500 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X208 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X306-1LD FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Siveillance Control Pro toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1501 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2P IRT (incl. SIPLUS NET variant) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SINEC NMS versions ant\u00e9rieures \u00e0 V1.0 SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP200 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-2 EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RTU 3000 family toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2P IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "LOGO! CMR2020 versions ant\u00e9rieures \u00e0 V2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Operation Scheduler toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X208PRO versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X408-2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP300 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1400 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Modular (P2 Ethernet) toutes versions \u003e= V2.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RF650M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1545-1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "NX 1980 Series versions ant\u00e9rieures \u00e0 V1984",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X302-7 EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC toutes versions with OIS Extension Module",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M PoE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 Lean (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX5000 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-12M TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 ERPC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1524 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1510 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP100 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X200-4P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF201-3P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X201-3P IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter Femap V2021.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Compact (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X310 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP050 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF208 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V12.4 versions ant\u00e9rieures \u00e0 V12.4.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X206-1LD versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-12M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X216 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF206-1 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X320-1-2LD FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1536 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Modular (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M PoE TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Compact (P2 Ethernet) toutes versions \u003e= V2.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "GMA-Manager toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE MBC (PPC) (P2 Ethernet) toutes versions \u003e= V2.6.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1512 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X304-2FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF202-2P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LH toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Industrial Edge Management versions ant\u00e9rieures \u00e0 V1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.2 versions ant\u00e9rieures \u00e0 13.2.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2TS versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2LD (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2LD TS versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LH+ toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LD toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X201-3P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M PoE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.0 versions ant\u00e9rieures \u00e0 V5.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-3 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.1 versions ant\u00e9rieures \u00e0 V13.1.0.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V5.0 versions ant\u00e9rieures \u00e0 v5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter Femap V2020.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X212-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Siveillance Control toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.2 versions ant\u00e9rieures \u00e0 V5.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-37186",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37186"
},
{
"name": "CVE-2021-37190",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37190"
},
{
"name": "CVE-2021-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40356"
},
{
"name": "CVE-2021-33716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33716"
},
{
"name": "CVE-2021-37191",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37191"
},
{
"name": "CVE-2020-36478",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36478"
},
{
"name": "CVE-2021-37193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37193"
},
{
"name": "CVE-2020-7461",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7461"
},
{
"name": "CVE-2021-40354",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40354"
},
{
"name": "CVE-2021-40355",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40355"
},
{
"name": "CVE-2016-10011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10011"
},
{
"name": "CVE-2021-37201",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37201"
},
{
"name": "CVE-2021-25665",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25665"
},
{
"name": "CVE-2021-37202",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37202"
},
{
"name": "CVE-2021-33737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33737"
},
{
"name": "CVE-2020-36475",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36475"
},
{
"name": "CVE-2016-10708",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10708"
},
{
"name": "CVE-2021-37175",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37175"
},
{
"name": "CVE-2021-37174",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37174"
},
{
"name": "CVE-2021-40357",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40357"
},
{
"name": "CVE-2021-33720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33720"
},
{
"name": "CVE-2021-37203",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37203"
},
{
"name": "CVE-2021-37183",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37183"
},
{
"name": "CVE-2021-37184",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37184"
},
{
"name": "CVE-2021-37177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37177"
},
{
"name": "CVE-2021-37173",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37173"
},
{
"name": "CVE-2021-37200",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37200"
},
{
"name": "CVE-2021-33719",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33719"
},
{
"name": "CVE-2021-37181",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37181"
},
{
"name": "CVE-2021-31891",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31891"
},
{
"name": "CVE-2021-37192",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37192"
},
{
"name": "CVE-2021-37206",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37206"
},
{
"name": "CVE-2021-37176",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37176"
},
{
"name": "CVE-2021-27391",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27391"
},
{
"name": "CVE-2019-10941",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10941"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-706",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-09-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-847986 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-549234 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-549234.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-208530 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-288459 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-987403 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-535380 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-334944 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-676336 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-997732 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-835377 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-109294 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-109294.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-453715 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-692317 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-756638 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-316383 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-330339 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-500748 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-535997 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-150692 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-413407 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-944498 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-944498.pdf"
}
]
}
CERTFR-2021-AVI-706
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SINEMA Server versions antérieures à V14 SP3 | ||
| Siemens | N/A | SIMATIC CP 1543-1 (incl. SIPLUS variants) versions antérieures à V3.0 | ||
| Siemens | N/A | SCALANCE X212-2LD versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X202-2 IRT toutes versions | ||
| Siemens | N/A | Desigo CC V4.0 toutes versions | ||
| Siemens | N/A | TALON TC Modular (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE X204-2FM versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X320-1 FE toutes versions | ||
| Siemens | N/A | LOGO! CMR2040 versions antérieures à V2.2 | ||
| Siemens | N/A | SIMATIC RF350M toutes versions | ||
| Siemens | N/A | SCALANCE X308-2 (incl. SIPLUS NET variant) toutes versions | ||
| Siemens | N/A | Desigo CC Compact V5.0 versions antérieures à V5.0 QU1 | ||
| Siemens | N/A | SCALANCE XF204 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XF204-2BA IRT toutes versions | ||
| Siemens | N/A | SINEMA Remote Connect Server versions antérieures à V3.0 SP2 | ||
| Siemens | N/A | Teamcenter Active Workspace V5.1 versions antérieures à V5.1.5 | ||
| Siemens | N/A | SCALANCE X307-3LD toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1511 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X204-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XR324-4M EEC toutes versions | ||
| Siemens | N/A | SCALANCE X224 versions antérieures à V5.2.5 | ||
| Siemens | N/A | Desigo CC V5.0 versions antérieures à V5.0 QU1 | ||
| Siemens | N/A | Teamcenter V13.0 versions antérieures à V13.0.0.7 | ||
| Siemens | N/A | SCALANCE X204 IRT PRO toutes versions | ||
| Siemens | N/A | TALON TC Compact (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | Simcenter STAR-CCM+ Viewer versions antérieures à V2021.2.1 | ||
| Siemens | N/A | Teamcenter Active Workspace V4.3 versions antérieures à V4.3.10 | ||
| Siemens | N/A | Cerberus DMS V4.0 toutes versions | ||
| Siemens | N/A | APOGEE MEC (PPC) (P2 Ethernet) toutes versions >= V2.6.3 | ||
| Siemens | N/A | SIMATIC CP 443-1 (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE X310FE toutes versions | ||
| Siemens | N/A | SCALANCE X206-1 versions antérieures à V5.2.5 | ||
| Siemens | N/A | RUGGEDCOM ROX MX5000 versions antérieures à V2.14.1 | ||
| Siemens | N/A | Desigo CC Compact V4.2 toutes versions | ||
| Siemens | N/A | Desigo CC Compact V4.1 toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1500 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X208 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X306-1LD FE toutes versions | ||
| Siemens | N/A | SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | Siveillance Control Pro toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1501 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE X202-2P IRT (incl. SIPLUS NET variant) toutes versions | ||
| Siemens | N/A | SINEC NMS versions antérieures à V1.0 SP1 | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP200 toutes versions | ||
| Siemens | N/A | SCALANCE X307-2 EEC toutes versions | ||
| Siemens | N/A | Cerberus DMS V4.1 toutes versions | ||
| Siemens | N/A | SIMATIC RTU 3000 family toutes versions | ||
| Siemens | N/A | SCALANCE X202-2P IRT PRO toutes versions | ||
| Siemens | N/A | LOGO! CMR2020 versions antérieures à V2.2 | ||
| Siemens | N/A | Operation Scheduler toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | SCALANCE X208PRO versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X408-2 toutes versions | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP300 versions antérieures à V8.80 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1400 versions antérieures à V2.14.1 | ||
| Siemens | N/A | APOGEE PXC Modular (P2 Ethernet) toutes versions >= V2.8 | ||
| Siemens | N/A | SIMATIC RF650M toutes versions | ||
| Siemens | N/A | SIMATIC CP 1545-1 toutes versions | ||
| Siemens | N/A | NX 1980 Series versions antérieures à V1984 | ||
| Siemens | N/A | SCALANCE X302-7 EEC toutes versions | ||
| Siemens | N/A | Desigo CC toutes versions with OIS Extension Module | ||
| Siemens | N/A | SCALANCE X308-2M PoE toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 Lean (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX5000 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SCALANCE XR324-12M TS toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 ERPC toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1524 versions antérieures à V2.14.1 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1510 versions antérieures à V2.14.1 | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP100 versions antérieures à V8.80 | ||
| Siemens | N/A | SCALANCE X200-4P IRT toutes versions | ||
| Siemens | N/A | SIMATIC CP 343-1 (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE XF201-3P IRT toutes versions | ||
| Siemens | N/A | SCALANCE X201-3P IRT PRO toutes versions | ||
| Siemens | N/A | Simcenter Femap V2021.1 toutes versions | ||
| Siemens | N/A | APOGEE PXC Compact (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE X310 toutes versions | ||
| Siemens | N/A | SIPROTEC 5 relays with CPU variants CP050 versions antérieures à V8.80 | ||
| Siemens | N/A | SCALANCE X308-2M toutes versions | ||
| Siemens | N/A | SCALANCE XF208 versions antérieures à V5.2.5 | ||
| Siemens | N/A | Teamcenter V12.4 versions antérieures à V12.4.0.8 | ||
| Siemens | N/A | Desigo CC V4.2 toutes versions | ||
| Siemens | N/A | SCALANCE X206-1LD versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE XR324-12M toutes versions | ||
| Siemens | N/A | SCALANCE X216 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X308-2M TS toutes versions | ||
| Siemens | N/A | SCALANCE XF206-1 versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X320-1-2LD FE toutes versions | ||
| Siemens | N/A | RUGGEDCOM ROX RX1536 versions antérieures à V2.14.1 | ||
| Siemens | N/A | APOGEE PXC Modular (BACnet) versions antérieures à V3.5.3 | ||
| Siemens | N/A | SCALANCE XR324-4M PoE TS toutes versions | ||
| Siemens | N/A | APOGEE PXC Compact (P2 Ethernet) toutes versions >= V2.8 | ||
| Siemens | N/A | GMA-Manager toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | APOGEE MBC (PPC) (P2 Ethernet) toutes versions >= V2.6.3 | ||
| Siemens | N/A | RUGGEDCOM ROX RX1512 versions antérieures à V2.14.1 | ||
| Siemens | N/A | Desigo CC V4.1 toutes versions | ||
| Siemens | N/A | SCALANCE X304-2FE toutes versions | ||
| Siemens | N/A | SCALANCE XF202-2P IRT toutes versions | ||
| Siemens | N/A | SCALANCE X308-2LH toutes versions | ||
| Siemens | N/A | Desigo CC Compact V4.0 toutes versions | ||
| Siemens | N/A | Industrial Edge Management versions antérieures à V1.3 | ||
| Siemens | N/A | Teamcenter V13.2 versions antérieures à 13.2.0.2 | ||
| Siemens | N/A | SCALANCE X204-2TS versions antérieures à V5.2.5 | ||
| Siemens | N/A | Cerberus DMS V4.2 toutes versions | ||
| Siemens | N/A | SCALANCE X204-2LD (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X204-2LD TS versions antérieures à V5.2.5 | ||
| Siemens | N/A | SCALANCE X308-2LH+ toutes versions | ||
| Siemens | N/A | SCALANCE X204 IRT toutes versions | ||
| Siemens | N/A | SCALANCE X308-2LD toutes versions | ||
| Siemens | N/A | SCALANCE X201-3P IRT toutes versions | ||
| Siemens | N/A | SCALANCE XR324-4M PoE toutes versions | ||
| Siemens | N/A | Teamcenter Active Workspace V5.0 versions antérieures à V5.0.8 | ||
| Siemens | N/A | SCALANCE X307-3 toutes versions | ||
| Siemens | N/A | Teamcenter V13.1 versions antérieures à V13.1.0.5 | ||
| Siemens | N/A | Cerberus DMS V5.0 versions antérieures à v5.0 QU1 | ||
| Siemens | N/A | SCALANCE XF204 IRT toutes versions | ||
| Siemens | N/A | Simcenter Femap V2020.2 toutes versions | ||
| Siemens | N/A | SCALANCE X212-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 | ||
| Siemens | N/A | Siveillance Control toutes versions with OIS running on Debian 9 or earlier | ||
| Siemens | N/A | Teamcenter Active Workspace V5.2 versions antérieures à V5.2.1 | ||
| Siemens | N/A | SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) toutes versions | ||
| Siemens | N/A | SCALANCE XF204-2 (incl. SIPLUS NET variant) versions antérieures à V5.2.5 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SINEMA Server versions ant\u00e9rieures \u00e0 V14 SP3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1543-1 (incl. SIPLUS variants) versions ant\u00e9rieures \u00e0 V3.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X212-2LD versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TALON TC Modular (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2FM versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X320-1 FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "LOGO! CMR2040 versions ant\u00e9rieures \u00e0 V2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RF350M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2 (incl. SIPLUS NET variant) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V5.0 versions ant\u00e9rieures \u00e0 V5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204-2BA IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SINEMA Remote Connect Server versions ant\u00e9rieures \u00e0 V3.0 SP2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.1 versions ant\u00e9rieures \u00e0 V5.1.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-3LD toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1511 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X224 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V5.0 versions ant\u00e9rieures \u00e0 V5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.0 versions ant\u00e9rieures \u00e0 V13.0.0.7",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204 IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TALON TC Compact (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter STAR-CCM+ Viewer versions ant\u00e9rieures \u00e0 V2021.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V4.3 versions ant\u00e9rieures \u00e0 V4.3.10",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE MEC (PPC) (P2 Ethernet) toutes versions \u003e= V2.6.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 443-1 (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X310FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X206-1 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX MX5000 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1500 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X208 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X306-1LD FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 443-1 Advanced (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Siveillance Control Pro toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1501 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2P IRT (incl. SIPLUS NET variant) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SINEC NMS versions ant\u00e9rieures \u00e0 V1.0 SP1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP200 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-2 EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RTU 3000 family toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X202-2P IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "LOGO! CMR2020 versions ant\u00e9rieures \u00e0 V2.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Operation Scheduler toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X208PRO versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X408-2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP300 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1400 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Modular (P2 Ethernet) toutes versions \u003e= V2.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC RF650M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 1545-1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "NX 1980 Series versions ant\u00e9rieures \u00e0 V1984",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X302-7 EEC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC toutes versions with OIS Extension Module",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M PoE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 Lean (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX5000 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-12M TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 ERPC toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1524 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1510 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP100 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X200-4P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF201-3P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X201-3P IRT PRO toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter Femap V2021.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Compact (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X310 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIPROTEC 5 relays with CPU variants CP050 versions ant\u00e9rieures \u00e0 V8.80",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF208 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V12.4 versions ant\u00e9rieures \u00e0 V12.4.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X206-1LD versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-12M toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X216 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2M TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF206-1 versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X320-1-2LD FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1536 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Modular (BACnet) versions ant\u00e9rieures \u00e0 V3.5.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M PoE TS toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE PXC Compact (P2 Ethernet) toutes versions \u003e= V2.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "GMA-Manager toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "APOGEE MBC (PPC) (P2 Ethernet) toutes versions \u003e= V2.6.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "RUGGEDCOM ROX RX1512 versions ant\u00e9rieures \u00e0 V2.14.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC V4.1 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X304-2FE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF202-2P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LH toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Desigo CC Compact V4.0 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Industrial Edge Management versions ant\u00e9rieures \u00e0 V1.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.2 versions ant\u00e9rieures \u00e0 13.2.0.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2TS versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V4.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2LD (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204-2LD TS versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LH+ toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X204 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X308-2LD toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X201-3P IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XR324-4M PoE toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.0 versions ant\u00e9rieures \u00e0 V5.0.8",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X307-3 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter V13.1 versions ant\u00e9rieures \u00e0 V13.1.0.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Cerberus DMS V5.0 versions ant\u00e9rieures \u00e0 v5.0 QU1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204 IRT toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Simcenter Femap V2020.2 toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE X212-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Siveillance Control toutes versions with OIS running on Debian 9 or earlier",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "Teamcenter Active Workspace V5.2 versions ant\u00e9rieures \u00e0 V5.2.1",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC CP 343-1 Advanced (incl. SIPLUS variants) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SCALANCE XF204-2 (incl. SIPLUS NET variant) versions ant\u00e9rieures \u00e0 V5.2.5",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-37186",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37186"
},
{
"name": "CVE-2021-37190",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37190"
},
{
"name": "CVE-2021-40356",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40356"
},
{
"name": "CVE-2021-33716",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33716"
},
{
"name": "CVE-2021-37191",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37191"
},
{
"name": "CVE-2020-36478",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36478"
},
{
"name": "CVE-2021-37193",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37193"
},
{
"name": "CVE-2020-7461",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-7461"
},
{
"name": "CVE-2021-40354",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40354"
},
{
"name": "CVE-2021-40355",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40355"
},
{
"name": "CVE-2016-10011",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10011"
},
{
"name": "CVE-2021-37201",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37201"
},
{
"name": "CVE-2021-25665",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-25665"
},
{
"name": "CVE-2021-37202",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37202"
},
{
"name": "CVE-2021-33737",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33737"
},
{
"name": "CVE-2020-36475",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-36475"
},
{
"name": "CVE-2016-10708",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-10708"
},
{
"name": "CVE-2021-37175",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37175"
},
{
"name": "CVE-2021-37174",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37174"
},
{
"name": "CVE-2021-40357",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-40357"
},
{
"name": "CVE-2021-33720",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33720"
},
{
"name": "CVE-2021-37203",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37203"
},
{
"name": "CVE-2021-37183",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37183"
},
{
"name": "CVE-2021-37184",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37184"
},
{
"name": "CVE-2021-37177",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37177"
},
{
"name": "CVE-2021-37173",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37173"
},
{
"name": "CVE-2021-37200",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37200"
},
{
"name": "CVE-2021-33719",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33719"
},
{
"name": "CVE-2021-37181",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37181"
},
{
"name": "CVE-2021-31891",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-31891"
},
{
"name": "CVE-2021-37192",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37192"
},
{
"name": "CVE-2021-37206",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37206"
},
{
"name": "CVE-2021-37176",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-37176"
},
{
"name": "CVE-2021-27391",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-27391"
},
{
"name": "CVE-2019-10941",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-10941"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-706",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-09-15T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSiemens. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer\nune ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0\ndistance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-847986 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-847986.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-549234 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-549234.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-208530 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-208530.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-288459 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-987403 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-987403.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-535380 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-334944 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-334944.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-676336 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-997732 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-997732.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-835377 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-109294 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-109294.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-453715 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-453715.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-692317 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-756638 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-316383 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-316383.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-330339 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-330339.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-500748 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-535997 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-150692 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-150692.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-413407 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-413407.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-944498 du 14 septembre 2021",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-944498.pdf"
}
]
}
SSA-288459
Vulnerability from csaf_siemens - Published: 2021-09-14 00:00 - Updated: 2021-09-14 00:00Summary
SSA-288459: Heap Overflow Vulnerability in RFID terminals
Notes
Summary
A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code.
Siemens recommends specific countermeasures for products.
General Recommendations
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
{
"document": {
"category": "Siemens Security Advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited.",
"tlp": {
"label": "WHITE"
}
},
"notes": [
{
"category": "summary",
"text": "A heap overflow vulnerability in dhclient of the affected products, which has been published alongside other vulnerabilities as part of NAME:WRECK could allow an attacker to potentially remotely execute code.\n\nSiemens recommends specific countermeasures for products.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\n\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-288459.txt"
},
{
"category": "self",
"summary": "SSA-288459: Heap Overflow Vulnerability in RFID terminals - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-288459.json"
}
],
"title": "SSA-288459: Heap Overflow Vulnerability in RFID terminals",
"tracking": {
"current_release_date": "2021-09-14T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-288459",
"initial_release_date": "2021-09-14T00:00:00Z",
"revision_history": [
{
"date": "2021-09-14T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC RF350M",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SIMATIC RF350M"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/*",
"product": {
"name": "SIMATIC RF650M",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "SIMATIC RF650M"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-7461",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2"
]
},
"references": [
{
"summary": "CVE-2020-7461 Mitre 5.0 json",
"url": "https://cert-portal.siemens.com/productcert/mitre/CVE-2020-7461.json"
}
],
"remediations": [
{
"category": "none_available",
"details": "Currently no remediation is available",
"product_ids": [
"1",
"2"
]
},
{
"category": "mitigation",
"details": "Use trusted DNS servers in internal network, and restrict DNS traffic to this network only through firewalls.",
"product_ids": [
"1",
"2"
]
},
{
"category": "workaround",
"details": "Protect network access to affected devices.",
"product_ids": [
"1",
"2"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:C",
"version": "3.1"
},
"products": [
"1",
"2"
]
}
],
"title": "CVE-2020-7461"
}
]
}
FKIE_CVE-2020-7461
Vulnerability from fkie_nvd - Published: 2021-03-26 21:15 - Updated: 2024-11-21 05:37
Severity ?
Summary
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.
References
| URL | Tags | ||
|---|---|---|---|
| secteam@freebsd.org | https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf | Third Party Advisory | |
| secteam@freebsd.org | https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.3 | |
| freebsd | freebsd | 11.4 | |
| freebsd | freebsd | 11.4 | |
| freebsd | freebsd | 11.4 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| freebsd | freebsd | 12.1 | |
| siemens | simatic_rf350m_firmware | * | |
| siemens | simatic_rf350m | - | |
| siemens | simatic_rf650m_firmware | * | |
| siemens | simatic_rf650m | - |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*",
"matchCriteriaId": "F35957CE-AF9F-40CA-BDD1-FA6A0E73783F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*",
"matchCriteriaId": "EA929713-B797-494A-853D-C121D9D69519",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*",
"matchCriteriaId": "B87AF171-95AC-4DDA-8D94-694F85638B46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*",
"matchCriteriaId": "1CC8B031-41BB-4846-B092-7E4BC6F35D6B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*",
"matchCriteriaId": "83E34012-BC9D-4F0C-AAE1-FE5767B4EED6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*",
"matchCriteriaId": "3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*",
"matchCriteriaId": "EA5006FF-06A5-4D95-BF5B-29F26248D11F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*",
"matchCriteriaId": "A705031B-FD63-4076-B92E-E826E11D7111",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*",
"matchCriteriaId": "11C1EFB1-68E5-45F4-A7E1-744574F290D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*",
"matchCriteriaId": "25F649A7-9265-4552-8934-BCE083363982",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*",
"matchCriteriaId": "F202C856-5B95-4796-AC4A-1F210E7BAB8F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*",
"matchCriteriaId": "9419C866-C478-4CDE-A9A1-E592D8FF0933",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*",
"matchCriteriaId": "2B6DFC23-A7A1-431A-9AD9-A820579F95F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
"matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
"matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
"matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*",
"matchCriteriaId": "BD730B6A-F123-4685-ACB3-4F20AAAB77F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*",
"matchCriteriaId": "508150E3-2C0C-4EEB-BFC9-BB5CEB404C06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*",
"matchCriteriaId": "B5D692EF-A5D7-430E-91BA-4CD137343B66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*",
"matchCriteriaId": "D50C60A7-4C9F-4636-92E9-9F5B8B01BE5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*",
"matchCriteriaId": "6C49F6C7-A740-42F4-93BB-512CBF334516",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*",
"matchCriteriaId": "402740C4-5B55-423F-BAD2-F742E1E21ADC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*",
"matchCriteriaId": "9DCAA10A-C612-45E0-84B7-55897F49D65E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*",
"matchCriteriaId": "CB6258A5-8066-48B8-A417-09A1547DD57A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*",
"matchCriteriaId": "6601C7C4-EC36-4EAA-90AC-D3156A2BF330",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_rf350m_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5B60EA5E-219D-44E8-800B-97AB739B5895",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_rf350m:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E4B5DF0A-2850-4BFA-B110-36F2BE323A28",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:siemens:simatic_rf650m_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0B1DF7FC-EE60-48EE-8301-B8BDED3FD33E",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:siemens:simatic_rf650m:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7DAE6641-16B6-4B41-B170-DAB51DF5AEC2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit."
},
{
"lang": "es",
"value": "En FreeBSD versiones 12.1-STABLE anteriores a r365010, 11.4-STABLE anteriores a r365011, 12.1-RELEASE anteriores a p9, 11.4-RELEASE anteriores a p3 y 11.3-RELEASE anteriores a p13, dhclient(8) no puede manejar determinadas entradas malformadas relacionadas con el manejo de la opci\u00f3n 119 de DHCP resultando en un desbordamiento de la pila.\u0026#xa0;En principio, el desbordamiento de la pila podr\u00eda explotarse para lograr una ejecuci\u00f3n de c\u00f3digo remota.\u0026#xa0;El proceso afectado se ejecuta con privilegios reducidos en un sandbox Capsicum, limitando el impacto inmediato de una explotaci\u00f3n."
}
],
"id": "CVE-2020-7461",
"lastModified": "2024-11-21T05:37:11.450",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2021-03-26T21:15:13.053",
"references": [
{
"source": "secteam@freebsd.org",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"source": "secteam@freebsd.org",
"tags": [
"Vendor Advisory"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
}
],
"sourceIdentifier": "secteam@freebsd.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-787"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-X566-M9MC-F47W
Vulnerability from github – Published: 2022-05-24 17:45 – Updated: 2022-05-24 17:45
VLAI?
Details
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.
{
"affected": [],
"aliases": [
"CVE-2020-7461"
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-03-26T21:15:00Z",
"severity": "HIGH"
},
"details": "In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.",
"id": "GHSA-x566-m9mc-f47w",
"modified": "2022-05-24T17:45:30Z",
"published": "2022-05-24T17:45:30Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7461"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf"
},
{
"type": "WEB",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc"
}
],
"schema_version": "1.4.0",
"severity": []
}
CNVD-2021-29082
Vulnerability from cnvd - Published: 2021-04-18
VLAI Severity ?
Title
FreeBSD缓冲区溢出漏洞（CNVD-2021-29082）
Description
FreeBSD是FreeBSD基金会的一套类Unix操作系统。
FreeBSD存在缓冲区溢出漏洞，攻击者可利用该漏洞通过Dhclient Option 119触发拒绝服务并代码执行。
Severity
高
Patch Name
FreeBSD缓冲区溢出漏洞（CNVD-2021-29082）的补丁
Patch Description
FreeBSD是FreeBSD基金会的一套类Unix操作系统。
FreeBSD存在缓冲区溢出漏洞，攻击者可利用该漏洞通过Dhclient Option 119触发拒绝服务并代码执行。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新： https://www.cybersecurity-help.cz/vdb/SB2020090303
Reference
https://vigilance.fr/vulnerability/FreeBSD-buffer-overflow-via-Dhclient-Option-119-33238
Impacted products
| Name | ['FreeBSD Freebsd 12.1-STABLE，<r365010', 'FreeBSD Freebsd 11.4-STABLE，<r365011', 'FreeBSD Freebsd 12.1-RELEASE，<p9', 'FreeBSD Freebsd 11.4-RELEASE，<p3', 'FreeBSD Freebsd 11.3-RELEASE，<p13'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2020-7461",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2020-7461"
}
},
"description": "FreeBSD\u662fFreeBSD\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u7c7bUnix\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nFreeBSD\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7Dhclient Option 119\u89e6\u53d1\u62d2\u7edd\u670d\u52a1\u5e76\u4ee3\u7801\u6267\u884c\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.cybersecurity-help.cz/vdb/SB2020090303",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2021-29082",
"openTime": "2021-04-18",
"patchDescription": "FreeBSD\u662fFreeBSD\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u7c7bUnix\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nFreeBSD\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7Dhclient Option 119\u89e6\u53d1\u62d2\u7edd\u670d\u52a1\u5e76\u4ee3\u7801\u6267\u884c\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "FreeBSD\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2021-29082\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"FreeBSD Freebsd 12.1-STABLE\uff0c\u003cr365010",
"FreeBSD Freebsd 11.4-STABLE\uff0c\u003cr365011",
"FreeBSD Freebsd 12.1-RELEASE\uff0c\u003cp9",
"FreeBSD Freebsd 11.4-RELEASE\uff0c\u003cp3",
"FreeBSD Freebsd 11.3-RELEASE\uff0c\u003cp13"
]
},
"referenceLink": "https://vigilance.fr/vulnerability/FreeBSD-buffer-overflow-via-Dhclient-Option-119-33238",
"serverity": "\u9ad8",
"submitTime": "2020-09-04",
"title": "FreeBSD\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2021-29082\uff09"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…