Siemens SCALANCE SC-600 Family

🗓️ 13 Feb 2024 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 56 Views

Siemens SCALANCE SC-600 Family security vulnerabilities. CISA will no longer update ICS advisories after January 10, 2023. Vulnerabilities allow privilege escalation, arbitrary code execution, and system root shell spawn

Reporter	Title	Published	Views	Family All 114
ATTACKERKB	CVE-2023-44320	14 Nov 202311:15	–	attackerkb
ATTACKERKB	CVE-2023-44373	14 Nov 202311:15	–	attackerkb
ATTACKERKB	CVE-2023-44321	14 Nov 202311:15	–	attackerkb
ATTACKERKB	CVE-2023-44322	14 Nov 202311:15	–	attackerkb
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the possibility of loading unreliable external data alongside reliable data, allowing a perpetrator to execute arbitrary code.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to the use of a weak password hash function, allows attackers to modify the device’s configuration.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software lies in the improper checking of the return value of methods or functions, allowing attackers to disable user notifications.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software, related to security mechanism errors, allows a intruder to alter the user interface.	22 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software arises from the lack of measures to neutralize special elements, allowing a perpetrator to execute arbitrary codes.	22 Nov 202300:00	–	bdu_fstec

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-602936.json
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-602936.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-602936.pdf
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-602936.txt
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-046-09.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-046-09
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

13 Feb 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.16.7 - 9.1

CVSS 49.4

EPSS0.00533

SSVC