Detections
Analytics

Siemens SIMATIC S7-1500 TM MFP BIOS Double Free (CVE-2021-27645)

low Tenable OT Security Plugin ID 502935

Synopsis

The remote OT asset is affected by a vulnerability.

Description

The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

See Also

https://cert-portal.siemens.com/productcert/pdf/ssa-831302.pdf

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

https://support.industry.siemens.com/cs/ww/en/view/109945851/

https://www.cisa.gov/news-events/ics-advisories/icsa-23-166-10

Plugin Details

Severity: Low

ID: 502935

Version: 1.2

Type: remote

Family: Tenable.ot

Published: 2/25/2025

Updated: 3/10/2025

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 1.4

CVSS v2

Risk Factor: Low

Base Score: 1.9

Temporal Score: 1.4

Vector: CVSS2#AV:L/AC:M/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2021-27645

CVSS v3

Risk Factor: Low

Base Score: 2.5

Temporal Score: 2.3

Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:siemens:simatic_s7-1500_tm_mfp, cpe:/o:siemens:siplus_s7-1500_cpu_firmware:3.1.0, cpe:/o:siemens:simatic_s7-1500_cpu_firmware:3.1.0

Required KB Items: Tenable.ot/Siemens

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 6/13/2023

Vulnerability Publication Date: 6/13/2023

Reference Information

CVE: CVE-2021-27645

CWE: 415

ICSA: 23-166-10