SSA-244969 V2.0 (Last Update: 2023-04-11): OpenSSL Vulnerability in Industrial Products
Risk Summary
<p>OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content.</p> <p>Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not yet available.</p> <p>[0] <a href="https://www.openssl.org/news/secadv/20210824.txt" class="uri">https://www.openssl.org/news/secadv/20210824.txt</a></p>
Remediations
- Refer to Siemens ProductCERT advisory for patch and remediation guidance.
Affected Vendors
Affected Products (1)
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more