Siemens SIMATIC/SINUMERIK/profinet io Denial of Service Vulnerability (CVE-2018-4843)

Siemens SIMATIC/SINUMERIK/profinet io Denial of Service Vulnerability (CVE-2018-4843)
Siemens SIMATIC/SINUMERIK/profinet io Denial of Service Vulnerability (CVE-2018-4843)

Release date:
Updated on:

Affected Systems:

Siemens SIMATIC

Description:

Bugtraq id: 103465
CVE (CAN) ID: CVE-2018-4843

Siemens SIMATIC/SINUMERIK/profinet io is an industry controller product.

Siemens SIMATIC/SINUMERIK/profinet io has a denial of service vulnerability in processing profinet dcp network packets. Attackers can exploit this vulnerability to cause denial of service.

<* Source: Siemens ProductCERT
*>

Suggestion:

Vendor patch:

Siemens
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.siemens.com/corporate-technology/pool/
Https://cert-portal.siemens.com/productcert/pdf/ssa-592007.pdf

This article permanently updates link: https://www.bkjia.com/Linux/2018-03/151553.htm