SIEMENS-SSA-623229
·
Published 2020-02-10
·
View on Siemens ProductCERT ↗
SSA-623229 (Last Update: 2020-02-10): DROWN Vulnerability in Industrial Products
CVSS 5.9
MEDIUM
Risk Summary
<p>The disclosed attack called DROWN (Decrypting RSA with Obsolete and Weakened eNcryption), also known as CVE-2016-0800, could potentially allow the decryption of SSL/TLS sessions of some Siemens industrial products under certain conditions.</p> <p>Siemens has released firmware updates and solutions to resolve the vulnerability</p>
CVEs (1)
Remediations
- Refer to Siemens ProductCERT advisory for patch and remediation guidance.
Affected Vendors
Siemens
Affected Products (1)
Siemens
·
SSA-623229 (Last Update: 2020-02-10): DROWN Vulnerability in Industrial Products
See advisory
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more