Risk Summary
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
CVEs (1)
Remediations
- Currently no fix is available
- Update to V9.0 QU1 or later version
- Update to patch V8.0 QU2.0021
- https://support.industry.siemens.com/cs/ww/en/view/109989041/
Affected Vendors
Siemens
Affected Products (3)
Siemens
·
Desigo CC family V7
vers:all/*
Siemens
·
Desigo CC family V8
vers:all/*
Siemens
·
Desigo CC family V9
vers:intdot/<9.0.1
Affected Sectors
Critical Manufacturing
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more