ICSA-21-019-01
·
Published 2025-05-06
·
View on CISA ICS-CERT ↗
dnsmasq by Simon Kelley (Update A)
CVSS 4.0
MEDIUM
CVEs (3)
Remediations
- Update to V6.4 or later version
- Update to V2.1.3 or later version
- Currently no remediation is available
- SCALANCE M-800: Disable DNS proxy in the device configuration (System - DNS - DNS Proxy - Disable Checkbox „Enable DNS Proxy“), and configure the connected devices in the internal network to use a different DNS server. Note that the DNS proxy is enabled by default.
- RUGGEDCOM RM1224: Same as for SCALANCE M-800. Note that the DNS proxy is enabled by default.
- SCALANCE S615: Same as for SCALANCE M-800. Note that the DNS proxy is disabled by default.
- SCALANCE SC-600: Same as for SCALANCE M-800. Note that the DNS proxy is disabled by default.
- SCALANCE W1750D: If “OpenDNS”, “Captive Portal” or “URL redirection” functionality is not used, deploy firewall rules in the device configuration to block incoming access to port 53/UDP
Affected Vendors
Siemens
Affected Products (5)
Siemens
·
RUGGEDCOM RM1224
<V6.4
Siemens
·
SCALANCE M-800
<V6.4
Siemens
·
SCALANCE S615
<V6.4
Siemens
·
SCALANCE SC-600
<V2.1.3
Siemens
·
SCALANCE W1750D
vers:all/*
Affected Sectors
Multiple
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more