SIEMENS-SSA-324955 · Published 2023-03-14 · View on Siemens ProductCERT ↗

SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products

CVSS N/A MEDIUM

Risk Summary

<p>A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see <a href="https://www.saddns.net/" class="uri">https://www.saddns.net/</a>.</p> <p>Siemens has released updates for the affected products and recommends to update to the latest versions.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more