SSA-772220
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Siemens | TIM 1531 IRC (6GK7543-1MX00-0XE0) | |
| Siemens | SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) | |
| Siemens | SIMATIC RF166C (6GT2002-0EE20) | |
| Siemens | SCALANCE SC632-2C (6GK5632-2GS00-2AC2) | |
| Siemens | SCALANCE S615 (6GK5615-0AA00-2AA2) | |
| Siemens | SIMATIC CP 1243-7 LTE US (6GK7243-7SX30-0XE0) | |
| Siemens | SIMATIC HMI Comfort Outdoor Panels (incl. SIPLUS variants) | |
| Siemens | SCALANCE XR-300WG | |
| Siemens | SIMATIC WinCC TeleControl | |
| Siemens | SIMATIC PCS neo | |
| Siemens | SIMATIC CP 1543-1 (6GK7543-1AX00-0XE0) | |
| Siemens | SCALANCE W1788-2IA M12 (6GK5788-2HY01-0AA0) | |
| Siemens | SINUMERIK OPC UA Server | |
| Siemens | SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0) | |
| Siemens | SIMATIC RF650R (6GT2811-6AB20) | |
| Siemens | SIMATIC S7-1200 CPU family (incl. SIPLUS variants) | |
| Siemens | SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) | |
| Siemens | SCALANCE M874-2 (6GK5874-2AA00-2AA2) | |
| Siemens | SIMATIC MV550 S (6GF3550-0CD10) | |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP family (incl. SIPLUS variant) |
…and 75 more
Timeline
- Jul 13, 2021 CVE Published
- Jan 9, 2024 CVE Updated
References
- https://cert-portal.siemens.com/productcert/csaf/ssa-772220.json advisory
- https://cert-portal.siemens.com/productcert/html/ssa-772220.html advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf advisory
- https://cert-portal.siemens.com/productcert/txt/ssa-772220.txt advisory
- https://support.industry.siemens.com/cs/ww/en/view/109817067/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109801424/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109814522/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109746530/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109801374/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109793280/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109808361 patch
- https://support.industry.siemens.com/cs/ww/en/view/109798331 patch
- https://support.industry.siemens.com/cs/ww/en/view/109811116/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109800912 patch
- https://support.industry.siemens.com/cs/ww/en/view/109807276 patch
- https://support.industry.siemens.com/cs/ww/en/view/109808633 patch
- https://support.industry.siemens.com/cs/ww/en/view/109812218 patch
- https://support.industry.siemens.com/cs/ww/en/view/109478459/ patch
- https://support.industry.siemens.com/cs/ww/en/view/109801292 patch
- https://support.industry.siemens.com/cs/ww/en/view/109794407/ patch
…and 14 more