Threat Investigation
Request a demo

CVE-2021-37182

High

Description

A vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C (L3 int.) (All versions < V6.5), SCALANCE XM408-8C (All versions < V6.5), SCALANCE XM408-8C (L3 int.) (All versions < V6.5), SCALANCE XM416-4C (All versions < V6.5), SCALANCE XM416-4C (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 1x230V (All versions < V6.5), SCALANCE XR524-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 24V (All versions < V6.5), SCALANCE XR524-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR524-8C, 2x230V (All versions < V6.5), SCALANCE XR524-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 1x230V (All versions < V6.5), SCALANCE XR526-8C, 1x230V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 24V (All versions < V6.5), SCALANCE XR526-8C, 24V (L3 int.) (All versions < V6.5), SCALANCE XR526-8C, 2x230V (All versions < V6.5), SCALANCE XR526-8C, 2x230V (L3 int.) (All versions < V6.5), SCALANCE XR528-6M (All versions < V6.5), SCALANCE XR528-6M (2HR2) (All versions < V6.5), SCALANCE XR528-6M (2HR2, L3 int.) (All versions < V6.5), SCALANCE XR528-6M (L3 int.) (All versions < V6.5), SCALANCE XR552-12M (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2) (All versions < V6.5), SCALANCE XR552-12M (2HR2, L3 int.) (All versions < V6.5). The OSPF protocol implementation in affected devices fails to verify the checksum and length fields in the OSPF LS Update messages. An unauthenticated remote attacker could exploit this vulnerability to cause interruptions in the network by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.

SeverityHigh
CVSS7.5
Exploit probability—
ProductSiemens Scalance Xm408-4c Firmware
PublishedJun 14, 2022
First seenJun 14, 2022
Weakness typeCWE-354CWE-354

How to fix

Update
  • siemens scalance_xm408-4c_firmware6.5 or later
  • siemens scalance_xm408-4c_l3_firmware6.5 or later
  • siemens scalance_xm408-8c_firmware6.5 or later
  • siemens scalance_xm408-8c_l3_firmware6.5 or later
  • siemens scalance_xm416-4c_firmware6.5 or later
  • siemens scalance_xm416-4c_l3_firmware6.5 or later
  • siemens scalance_xr524-8c_firmware6.5 or later
  • siemens scalance_xr524-8c_l3_firmware6.5 or later
  • siemens scalance_xr526-8c_firmware6.5 or later
  • siemens scalance_xr526-8c_l3_firmware6.5 or later
  • siemens scalance_xr528-6m_firmware6.5 or later
  • siemens scalance_xr528-6m_2hr2_firmware6.5 or later

Affected products

ProductAffected versionsFixed in
siemens scalance_xm408-4c_firmwarev < 6.56.5
siemens scalance_xm408-4c_l3_firmwarev < 6.56.5
siemens scalance_xm408-8c_firmwarev < 6.56.5
siemens scalance_xm408-8c_l3_firmwarev < 6.56.5
siemens scalance_xm416-4c_firmwarev < 6.56.5
siemens scalance_xm416-4c_l3_firmwarev < 6.56.5
siemens scalance_xr524-8c_firmwarev < 6.56.5
siemens scalance_xr524-8c_l3_firmwarev < 6.56.5
siemens scalance_xr526-8c_firmwarev < 6.56.5
siemens scalance_xr526-8c_l3_firmwarev < 6.56.5
siemens scalance_xr528-6m_firmwarev < 6.56.5
siemens scalance_xr528-6m_2hr2_firmwarev < 6.56.5
siemens scalance_xr528-6m_2hr2_l3_firmwarev < 6.56.5
siemens scalance_xr528-6m_l3_firmwarev < 6.56.5
siemens scalance_xr552-12m_firmwarev < 6.56.5
siemens scalance_xr552-12m_2hr2_firmwarev < 6.56.5
siemens scalance_xr552-12m_2hr2_l3_firmwarev < 6.56.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.