| Title | 複数の Siemens 製品における境界外書き込みに関する脆弱性 |
|---|---|
| Summary | 複数の Siemens 製品には、境界外書き込みに関する脆弱性が存在します。 |
| Possible impacts | 情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | March 9, 2021, midnight |
| Registration Date | Nov. 22, 2021, 6:03 p.m. |
| Last Update | Nov. 22, 2021, 6:03 p.m. |
| CVSS3.0 : 重要 | |
| Score | 8.8 |
|---|---|
| Vector | CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CVSS2.0 : 警告 | |
| Score | 5.8 |
|---|---|
| Vector | AV:A/AC:L/Au:N/C:P/I:P/A:P |
| シーメンス |
| RUGGEDCOM RM1224 ファームウェア 4.3 以上 6.4 未満 |
| SCALANCE M-800 ファームウェア 4.3 以上 6.4 未満 |
| SCALANCE S615 ファームウェア 4.3 以上 6.4 未満 |
| SCALANCE SC-622-2C ファームウェア 2.0以上 2.1.3 未満 |
| SCALANCE SC-632-2C ファームウェア 2.0以上 2.1.3 未満 |
| SCALANCE SC-636-2C ファームウェア 2.0以上 2.1.3 未満 |
| SCALANCE SC-642-2C ファームウェア 2.0以上 2.1.3 未満 |
| SCALANCE SC-646-2C ファームウェア 2.0以上 2.1.3 未満 |
| SCALANCE XM400 ファームウェア 6.2 未満 |
| SCALANCE XR500 ファームウェア 6.2 未満 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2021年11月22日] 掲載 |
Nov. 22, 2021, 6:03 p.m. |
| Summary | A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active. |
|---|---|
| Publication Date | March 16, 2021, 2:15 a.m. |
| Registration Date | March 16, 2021, 10:02 a.m. |
| Last Update | Nov. 21, 2024, 2:55 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:* | 4.3 | 6.4 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* | 4.3 | 6.4 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* | 4.3 | 6.4 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_x300wg_firmware:*:*:*:*:*:*:*:* | 4.1 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_x300wg:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:* | 6.2 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:* | 6.2 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:* | 2.0 | ||||
| cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:* | 2.1 | 2.1.3 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:* | 2.0 | ||||
| cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:* | 2.1 | 2.1.3 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:* | 2.0 | ||||
| cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:* | 2.1 | 2.1.3 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:* | 2.0 | ||||
| cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:* | 2.1 | 2.1.3 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:* | 2.0 | ||||
| cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:* | 2.1 | 2.1.3 | |||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:* | 4.1 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:* | 4.1 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:* | 4.1 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:* | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:* | 4.1 | ||||
| execution environment | |||||
| 1 | cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:* | ||||