CNVD-2021-28705 — Vulnetix

CNVD-2021-28705 PUBLISHED

SIMOTICS CONNECT 400是一个连接器和传感器盒，安装在低压电机上，为MindSphere应用程序SIDRIVE IQ Fleet提供分析数据。 Siemens SIMOTICS CONNECT 400存在拒绝服务漏洞。该漏洞是由于DNS域名记录解压缩功能未能正确验证pointeroffset值。攻击者可利用漏洞造成拒绝服务情况。

Affected Products

Vendor	Product	Versions
	Siemens SIMOTICS CONNECT 400 < V0.5.0.0

Timeline

Apr 15, 2021 CVE ID Reserved
Apr 15, 2021 CVE Published

References

https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf url

Open in Interactive Console →