Rewterz Threat Advisory – ICS: Siemens Web Server of SCALANCE X200

Severity

High

Analysis Summary

CVE-2021-25668

The POST requests in the web server are processed incorrectly, and this may result in an out-of-bounds write in the heap. The heap overflow condition may be activated as the buffer overflow. This can be leveraged by an attacker to cause DoS (denial-of-service) conditions and execute codes remotely.

CVE-2021-25669

This buffer overflow is stack-based, and the incorrect processing of the POST requests may write out-of-bounds in the stack. The attacker could impact the webserver by leveraging the vulnerability to cause DoS (denial-of-service) conditions and execute codes remotely.

Impact

Remote Code Execution

Affected Vendors

Siemens

Affected Products

Web Server of SCALANCE X200

Remediation

Refer to the ICS advisory for the complete list of affected products, mitigation methods, and their respective patches.

https://us-cert.cisa.gov/ics/advisories/icsa-21-103-07