Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-45235
HistoryJun 15, 2022 - 12:00 a.m.

SIEMENS SCALANCE XM-400 and XR-500 OSPF packet processing vulnerability

2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
18

SCALANCE X switches are used to connect industrial components such as programmable logic controllers (PLCs) or human-machine interfaces (HMIs). an OSPF packet handling vulnerability exists in the SIEMENS SCALANCE XM-400 and XR-500, which stems from the OSPF protocol implementation in the device not validating the checksum and length fields in OSPF LS update messages. An attacker could exploit this vulnerability to cause a network outage by sending specially crafted OSPF packets.