Rewterz Threat Advisory – CVE-2020-8597 – ICS: Siemens SCALANCE, RUGGEDCOM

Severity

High

Analysis Summary

The version of pppd shipped with this product has a vulnerability that may allow an unauthenticated remote attacker to cause a stack buffer overflow, which may allow arbitrary code execution on the target system.

Impact

Arbitrary code execution

Affected Vendors

Siemens

Affected Products

• RUGGEDCOM RM1224: All versions prior to 6.3
• SCALANCE M-800 / S615: All versions prior to 6.3

Remediation

Siemens recommends applying the following updates:

• RUGGEDCOM RM1224: Update to v6.3
• SCALANCE M-800: Update to v6.3