SSA-377115 (Last Update: 2020-09-08): SegmentSmack in Linux IP-Stack based Industrial Devices

Risk Summary

<p>The latest updates for the affected products fix a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions.</p> <p>The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service.</p> <p>Siemens has released updates for the affected products and recommends to update to the new versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)