SB2022021105 - Multiple vulnerabilities in Siemens Industrial Products
Published: February 11, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2021-37185)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to operation on a resource after expiration or release in a PLC. A remote attacker can send a specially crafted packet and perform a denial of service (DoS) attack.
2) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2021-37204)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to operation on a resource after expiration or release in a PLC. A remote attacker can send a specially crafted packet and perform a denial of service (DoS) attack.
3) Memory leak (CVE-ID: CVE-2021-37205)
The vulnerability allows a remote attacker to perform DoS attack on the target system.
The vulnerability exists due memory leak in a PLC. A remote attacker can force the application to leak memory and perform denial of service attack.
Remediation
Install update from vendor's website.