ICSA-22-167-17 · Published 2024-07-09 · View on CISA ICS-CERT ↗

Siemens OpenSSL Affecting Industrial Products

CVSS 9.8 CRITICAL

CVEs (29)

CVE-2021-22924 CVE-2021-22925 CVE-2021-45960 CVE-2021-46143 CVE-2022-22822 CVE-2022-22823 CVE-2022-22824 CVE-2022-22825 CVE-2022-22826 CVE-2022-22827 CVE-2022-23852 CVE-2022-23990 CVE-2022-25235 CVE-2022-25236 CVE-2022-25313 CVE-2022-25314 CVE-2022-25315 CVE-2022-27221 CVE-2022-29034 CVE-2022-32251 CVE-2022-32252 CVE-2022-32253 CVE-2022-32254 CVE-2022-32255 CVE-2022-32256 CVE-2022-32258 CVE-2022-32259 CVE-2022-32261 CVE-2022-32262

Remediations

Update to V3.1 or later version

Affected Vendors

Siemens

Affected Products (1)

Siemens · SINEMA Remote Connect Server <V3.1

Affected Sectors

Critical Manufacturing, Commercial Facilities, Energy, Food and Agriculture, Healthcare and Public Health, Transportation Systems, Water and Wastewater Systems

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more