SB2021061010 - Multiple vulnerabilities in Siemens SIMATIC TIM 1531 IRC

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Information disclosure (CVE-ID: CVE-2020-8169)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to cURL sends a DNS query with the provided credentials for HTTP authentication when processing redirects. A remote attacker that controls a DNS server can gain access to HTTP authenticated credentials.

2) Improper Check for Certificate Revocation (CVE-ID: CVE-2020-8286)

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to incorrectly implemented checks for OCSP stapling. A remote attacker can provide a fraudulent OCSP response that would appear fine, instead of the real one.

Remediation

Install update from vendor's website.

References

• https://ics-cert.us-cert.gov/advisories/icsa-21-159-10"
• https://ics-cert.us-cert.gov/advisories/icsa-21-159-10</a></p><p>
• https://cert-portal.siemens.com/productcert/txt/ssa-200951.txt</p><p><br></p>