CNVD-2020-23039

Vulnerability from cnvd - Published: 2020-04-16
VLAI
Title
多款Siemens产品资源管理错误漏洞
Description
Siemens SCALANCE X-200IRT和SCALANCE XB-200都是德国西门子(Siemens)公司的产品。SCALANCE X-200IRT是一款工业级以太网交换机。SCALANCE XB-200是一款管理型工业以太网交换机。 多款Siemens产品中存在资源管理错误漏洞,该漏洞源于程序未能限制内存资源的分配,远程攻击者可通过发送特制的程序包利用该漏洞导致拒绝服务。
Severity
Patch Name
多款Siemens产品资源管理错误漏洞的补丁
Patch Description
Siemens SCALANCE X-200IRT和SCALANCE XB-200都是德国西门子(Siemens)公司的产品。SCALANCE X-200IRT是一款工业级以太网交换机。SCALANCE XB-200是一款管理型工业以太网交换机。 多款Siemens产品中存在资源管理错误漏洞,该漏洞源于程序未能限制内存资源的分配,远程攻击者可通过发送特制的程序包利用该漏洞导致拒绝服务。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序,请及时关注更新: https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf

Reference
https://www.us-cert.gov/ics/advisories/icsa-20-042-05
Impacted products
Name
['SIEMENS SIMATIC CP 343-1 Lean', 'Siemens SIMATIC CP 343-1 Advanced', 'SIEMENS SIMATIC RF182C', 'Siemens SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0', 'Siemens SCALANCE XB-200 <3.0', 'Siemens SCALANCE XC-200 <3.0', 'Siemens SCALANCE XP-200 <3.0', 'Siemens SCALANCE XF-200BA <3.0', 'Siemens SCALANCE XR-300WG <3.0', 'SIEMENS SIMATIC CP 1616 <2.8', 'SIEMENS SIMATIC CP 1604 <2.8', 'SIEMENS SIMATIC CP 443-1 Advanced', 'Siemens SINAMICS DCP <1.3', 'Siemens Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller', 'Siemens Development/Evaluation Kits for PROFINET IO EK-ERTEC 200 <4.5', 'Siemens Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P <4.6', 'Siemens PROFINET Driver for Controller <2.1', 'Siemens RUGGEDCOM RM1224 <4.3', 'Siemens SCALANCE M-800/S615 <4.3', 'Siemens SCALANCE W700 IEEE 802.11n <=6.0.1', 'Siemens SCALANCE X-200 switch', 'Siemens SCALANCE X-200IRT switch <5.3', 'Siemens SCALANCE X-300 switch', 'Siemens SCALANCE XM-400 switch <6.0', 'Siemens SCALANCE XR-500 switch <6.0', 'Siemens SIMATIC CP 343-1', 'Siemens SIMATIC CP 343-1 ERPC', 'Siemens SIMATIC CP 443-1', 'Siemens SIMATIC CP 443-1 OPC UA', 'Siemens SIMATIC ET200AL IM 157-1 PN', 'Siemens SIMATIC ET200M IM153-4 PN IO HF', 'Siemens SIMATIC ET200M IM153-4 PN IO ST', 'Siemens SIMATIC ET200MP IM155-5 PN HF <4.2.0', 'Siemens SIMATIC ET200MP IM155-5 PN ST <4.1.0', 'Siemens SIMATIC ET200S', 'Siemens SIMATIC ET200SP IM155-6 PN Basic', 'Siemens SIMATIC ET200SP IM155-6 PN HF <3.3.1', 'Siemens SIMATIC ET200SP IM155-6 PN ST <4.1.0', 'Siemens SIMATIC ET200ecoPN', 'Siemens SIMATIC IPC Support,Package for VxWorks', 'Siemens SIMATIC ET200pro,IM 154-3 PN HF', 'Siemens SIMATIC ET200pro,IM 154-4 PN HF', 'Siemens SIMATIC MV400', 'Siemens SIMATIC RF180C', 'Siemens SIMATIC RF600 <3']
Show details on source website

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-13946"
    }
  },
  "description": "Siemens SCALANCE X-200IRT\u548cSCALANCE XB-200\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002SCALANCE X-200IRT\u662f\u4e00\u6b3e\u5de5\u4e1a\u7ea7\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u3002SCALANCE XB-200\u662f\u4e00\u6b3e\u7ba1\u7406\u578b\u5de5\u4e1a\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u3002\n\n\u591a\u6b3eSiemens\u4ea7\u54c1\u4e2d\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9650\u5236\u5185\u5b58\u8d44\u6e90\u7684\u5206\u914d\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u7a0b\u5e8f\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-23039",
  "openTime": "2020-04-16",
  "patchDescription": "Siemens SCALANCE X-200IRT\u548cSCALANCE XB-200\u90fd\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002SCALANCE X-200IRT\u662f\u4e00\u6b3e\u5de5\u4e1a\u7ea7\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u3002SCALANCE XB-200\u662f\u4e00\u6b3e\u7ba1\u7406\u578b\u5de5\u4e1a\u4ee5\u592a\u7f51\u4ea4\u6362\u673a\u3002\r\n\r\n\u591a\u6b3eSiemens\u4ea7\u54c1\u4e2d\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u9650\u5236\u5185\u5b58\u8d44\u6e90\u7684\u5206\u914d\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u7a0b\u5e8f\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "SIEMENS SIMATIC CP 343-1 Lean",
      "Siemens SIMATIC CP 343-1 Advanced",
      "SIEMENS SIMATIC RF182C",
      "Siemens SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0",
      "Siemens SCALANCE XB-200 \u003c3.0",
      "Siemens SCALANCE XC-200 \u003c3.0",
      "Siemens SCALANCE XP-200 \u003c3.0",
      "Siemens SCALANCE XF-200BA \u003c3.0",
      "Siemens SCALANCE XR-300WG \u003c3.0",
      "SIEMENS SIMATIC CP 1616 \u003c2.8",
      "SIEMENS SIMATIC CP 1604 \u003c2.8",
      "SIEMENS SIMATIC CP 443-1 Advanced",
      "Siemens SINAMICS DCP \u003c1.3",
      "Siemens Development/Evaluation Kits for PROFINET IO DK Standard Ethernet Controller",
      "Siemens Development/Evaluation Kits for PROFINET IO EK-ERTEC 200 \u003c4.5",
      "Siemens Development/Evaluation Kits for PROFINET IO EK-ERTEC 200P \u003c4.6",
      "Siemens PROFINET Driver for Controller \u003c2.1",
      "Siemens RUGGEDCOM RM1224 \u003c4.3",
      "Siemens SCALANCE M-800/S615 \u003c4.3",
      "Siemens SCALANCE W700 IEEE 802.11n \u003c=6.0.1",
      "Siemens SCALANCE X-200 switch",
      "Siemens SCALANCE X-200IRT switch \u003c5.3",
      "Siemens SCALANCE X-300 switch",
      "Siemens SCALANCE XM-400 switch \u003c6.0",
      "Siemens SCALANCE XR-500 switch \u003c6.0",
      "Siemens SIMATIC CP 343-1",
      "Siemens SIMATIC CP 343-1 ERPC",
      "Siemens SIMATIC CP 443-1",
      "Siemens SIMATIC CP 443-1 OPC UA",
      "Siemens SIMATIC ET200AL IM 157-1 PN",
      "Siemens SIMATIC ET200M IM153-4 PN IO HF",
      "Siemens SIMATIC ET200M IM153-4 PN IO ST",
      "Siemens SIMATIC ET200MP IM155-5 PN HF \u003c4.2.0",
      "Siemens SIMATIC ET200MP IM155-5 PN ST \u003c4.1.0",
      "Siemens SIMATIC ET200S",
      "Siemens SIMATIC ET200SP IM155-6 PN Basic",
      "Siemens SIMATIC ET200SP IM155-6 PN HF \u003c3.3.1",
      "Siemens SIMATIC ET200SP IM155-6 PN ST \u003c4.1.0",
      "Siemens SIMATIC ET200ecoPN",
      "Siemens SIMATIC IPC Support,Package for VxWorks",
      "Siemens SIMATIC ET200pro,IM 154-3 PN HF",
      "Siemens SIMATIC ET200pro,IM 154-4 PN HF",
      "Siemens SIMATIC MV400",
      "Siemens SIMATIC RF180C",
      "Siemens SIMATIC RF600 \u003c3"
    ]
  },
  "referenceLink": "https://www.us-cert.gov/ics/advisories/icsa-20-042-05",
  "serverity": "\u9ad8",
  "submitTime": "2020-02-12",
  "title": "\u591a\u6b3eSiemens\u4ea7\u54c1\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…