RETIRED: Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities

Bugtraq ID:	101977
Class:	Input Validation Error
CVE:	CVE-2017-14491 CVE-2017-14495 CVE-2017-14496 CVE-2017-13704
Remote:	Yes
Local:	No
Published:	Nov 28 2017 12:00AM
Updated:	May 15 2019 05:00PM
Credit:	The vendor reported these issues.
Vulnerable:	Siemens SCALANCE W1750D 0 Siemens SCALANCE S615 0 Siemens SCALANCE M800 0
Not Vulnerable:

RETIRED: Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities

Multiple Siemens SCALANCE Products are prone to the following security vulnerabilities:

1. A buffer-overflow vulnerability
2. Multiple denial-of-service vulnerabilities

Attackers can exploit these issues to execute arbitrary code within the context of affected device or cause a denial-of-service condition.

This BID is being retired as a duplicate of BID 101085 Dnsmasq VU#973527 Multiple Security Vulnerabilities.

RETIRED: Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Multiple Siemens SCALANCE Products Multiple Security Vulnerabilities

References:

• Siemens Homepage (Siemens)
  
• ICSA-17-332-01:Siemens SCALANCE W1750D, M800, and S615 (CERT)