SSA-344238 V1.0: TCP Session Hijacking Vulnerability in Siemens Energy PLUSCONTROL 1st Gen Devices

Risk Summary

<p>PLUSCONTROL 1st Gen devices are affected by a vulnerability as initially reported in <a href="https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf">SSA-362164</a> for the Mentor Nucleus TCP/IP stack. The vulnerability could allow an attacker located in the same network to hijack or terminate TCP/IP sessions of a vulnerable device.</p> <p>Siemens Energy recommends specific countermeasures for use cases of the affected product.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)