Multiple Siemens Products ICSA-19-043-05 Multiple Security Vulnerabilities
BID:106996
CVE-2018-3616 | CVE-2018-3657 | CVE-2018-3658 |Info
Multiple Siemens Products ICSA-19-043-05 Multiple Security Vulnerabilities
| Bugtraq ID: | 106996 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-3616 CVE-2018-3657 CVE-2018-3658 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 12 2019 12:00AM |
| Updated: | Feb 12 2019 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Siemens SIMATIC ITP1000 0 Siemens SIMATIC IPC847D 0 Siemens SIMATIC IPC827D 0 Siemens SIMATIC IPC677D 0 Siemens SIMATIC IPC647D 0 Siemens SIMATIC IPC627D 0 Siemens SIMATIC IPC547G 0 Siemens SIMATIC IPC547E 0 Siemens SIMATIC IPC477E 0 Siemens SIMATIC IPC427E 0 Siemens SIMATIC FieldPG M5 0 |
| Not Vulnerable: |
Siemens SIMATIC IPC847D v19.01.14 Siemens SIMATIC IPC827D v19.02.11 Siemens SIMATIC IPC677D v19.01.11 Siemens SIMATIC IPC647D v19.01.14 Siemens SIMATIC IPC627D v19.02.11 Siemens SIMATIC IPC547G R1.23.0 Siemens SIMATIC IPC547E R1.30.0 Siemens SIMATIC IPC477E v21.01.09 Siemens SIMATIC IPC427E v21.01.09 Siemens SIMATIC FieldPG M5 v22.01.06 |
Discussion
Multiple Siemens Products ICSA-19-043-05 Multiple Security Vulnerabilities
Multiple Siemens Products are prone to the following security vulnerabilities:
1. Multiple stack-based buffer-overflow vulnerabilities
2. A denial-of-service vulnerability
3. A side channel attack information disclosure vulnerability
Attackers can exploit these issues to execute arbitrary code within the context of an affected device or obtain sensitive information or cause a denial-of-service condition.
The following Siemens products are affected:
SIMATIC FieldPG M5 All versions prior to 22.01.06,
SIMATIC IPC427E All versions prior to 21.01.09,
SIMATIC IPC477E All versions prior to 21.01.09,
SIMATIC IPC547E All versions prior to R1.30.0,
SIMATIC IPC547G All versions prior to R1.23.0,
SIMATIC IPC627D All versions prior to 19.02.11,
SIMATIC IPC647D All versions prior to 19.01.14,
SIMATIC IPC677D All versions prior to 19.02.11,
SIMATIC IPC827D All versions prior to 19.02.11,
SIMATIC IPC847D All versions prior to 19.01.14, and
SIMATIC ITP1000 All versions prior to 23.01.04
Multiple Siemens Products are prone to the following security vulnerabilities:
1. Multiple stack-based buffer-overflow vulnerabilities
2. A denial-of-service vulnerability
3. A side channel attack information disclosure vulnerability
Attackers can exploit these issues to execute arbitrary code within the context of an affected device or obtain sensitive information or cause a denial-of-service condition.
The following Siemens products are affected:
SIMATIC FieldPG M5 All versions prior to 22.01.06,
SIMATIC IPC427E All versions prior to 21.01.09,
SIMATIC IPC477E All versions prior to 21.01.09,
SIMATIC IPC547E All versions prior to R1.30.0,
SIMATIC IPC547G All versions prior to R1.23.0,
SIMATIC IPC627D All versions prior to 19.02.11,
SIMATIC IPC647D All versions prior to 19.01.14,
SIMATIC IPC677D All versions prior to 19.02.11,
SIMATIC IPC827D All versions prior to 19.02.11,
SIMATIC IPC847D All versions prior to 19.01.14, and
SIMATIC ITP1000 All versions prior to 23.01.04
References
Multiple Siemens Products ICSA-19-043-05 Multiple Security Vulnerabilities
References:
References: