cnvd - cnvd-2021-71428

cnvd-2021-71428

Vulnerability from cnvd

Title: Siemens SIPROTEC 5输入验证不当漏洞

Description:

Siemens SIPROTEC 5是德国西门子（Siemens）公司的一款多功能继电器。

Siemens SIPROTEC 5存在输入验证错误漏洞，该漏洞源于接收到的webpackets未能被正确处理。可以访问任何以太网接口的未经身份验证的远程攻击者可利用漏洞发送特制的数据包来强制重启目标设备。

Severity: 高

Patch Name: Siemens SIPROTEC 5输入验证不当漏洞的补丁

Patch Description:

Siemens SIPROTEC 5是德国西门子（Siemens）公司的一款多功能继电器。

Siemens SIPROTEC 5存在输入验证错误漏洞，该漏洞源于接收到的webpackets未能被正确处理。可以访问任何以太网接口的未经身份验证的远程攻击者可利用漏洞发送特制的数据包来强制重启目标设备。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf

Reference: https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf

Impacted products

Name
['Siemens SIPROTEC 5 relays with CPU variants CP050 < V8.80', 'Siemens SIPROTEC 5 relays with CPU variants CP100 < V8.80', 'Siemens SIPROTEC 5 relays with CPU variants CP200', 'Siemens SIPROTEC 5 relays with CPU variants CP300 < V8.80']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-37206"
    }
  },
  "description": "Siemens SIPROTEC 5\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u591a\u529f\u80fd\u7ee7\u7535\u5668\u3002\n\nSiemens SIPROTEC 5\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63a5\u6536\u5230\u7684webpackets\u672a\u80fd\u88ab\u6b63\u786e\u5904\u7406\u3002\u53ef\u4ee5\u8bbf\u95ee\u4efb\u4f55\u4ee5\u592a\u7f51\u63a5\u53e3\u7684\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6765\u5f3a\u5236\u91cd\u542f\u76ee\u6807\u8bbe\u5907\u3002",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-71428",
  "openTime": "2021-09-15",
  "patchDescription": "Siemens SIPROTEC 5\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u591a\u529f\u80fd\u7ee7\u7535\u5668\u3002\r\n\r\nSiemens SIPROTEC 5\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63a5\u6536\u5230\u7684webpackets\u672a\u80fd\u88ab\u6b63\u786e\u5904\u7406\u3002\u53ef\u4ee5\u8bbf\u95ee\u4efb\u4f55\u4ee5\u592a\u7f51\u63a5\u53e3\u7684\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6765\u5f3a\u5236\u91cd\u542f\u76ee\u6807\u8bbe\u5907\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens SIPROTEC 5\u8f93\u5165\u9a8c\u8bc1\u4e0d\u5f53\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens SIPROTEC 5 relays with CPU variants CP050 \u003c V8.80",
      "Siemens SIPROTEC 5 relays with CPU variants CP100 \u003c V8.80",
      "Siemens SIPROTEC 5 relays with CPU variants CP200",
      "Siemens SIPROTEC 5 relays with CPU variants CP300 \u003c V8.80"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf",
  "serverity": "\u9ad8",
  "submitTime": "2021-09-15",
  "title": "Siemens SIPROTEC 5\u8f93\u5165\u9a8c\u8bc1\u4e0d\u5f53\u6f0f\u6d1e"
}

CVE-2021-37206 (GCVE-0-2021-37206)

Vulnerability from cvelistv5

Published

2021-09-14 10:47

Modified

2024-08-04 01:16

Severity ?

CWE

CWE-20 - Improper Input Validation

Summary

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.

References

▼	URL	Tags
	https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

Siemens

SIPROTEC 5 relays with CPU variants CP050

Version: All versions < V8.80

	Siemens	SIPROTEC 5 relays with CPU variants CP100	Version: All versions < V8.80
	Siemens	SIPROTEC 5 relays with CPU variants CP300	Version: All versions < V8.80

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:16:03.653Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SIPROTEC 5 relays with CPU variants CP050",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP100",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        },
        {
          "product": "SIPROTEC 5 relays with CPU variants CP300",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V8.80"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-12T09:49:38",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2021-37206",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP050",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP100",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "SIPROTEC 5 relays with CPU variants CP300",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "All versions \u003c V8.80"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Siemens"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions \u003c V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions \u003c V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20: Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf",
              "refsource": "MISC",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-500748.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2021-37206",
    "datePublished": "2021-09-14T10:47:57",
    "dateReserved": "2021-07-21T00:00:00",
    "dateUpdated": "2024-08-04T01:16:03.653Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted