Detections
Analytics
Siemens SCALANCE W1750D Improper Input Validation (CVE-2021-25156)
medium Tenable OT Security Plugin ID 500984
Synopsis
The remote OT asset is affected by a vulnerability.Description
A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x:6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.Siemens recommends upgrading SCALANCE W1750D to v8.7.1.3 or later
Siemens has identified the following specific workarounds and mitigations for users to apply to reduce the risk:
- Block access to the Aruba Instant device IP address on Port 8211/UDP from all untrusted users.
- Block access to the Aruba Instant Command Line Interface from all untrusted users.
- Block access to the Aruba Instant Web Management Interface from all untrusted users.
As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends configuring the environment according to Siemens’ operational guidelines for industrial security and following the recommendations in the product manuals.
For additional information see Siemens Security Advisory SSA-723417
See Also
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt
https://www.cisa.gov/news-events/ics-advisories/icsa-21-131-14
https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf
Plugin Details
Severity: Medium
ID: 500984
Version: 1.3
Type: remote
Family: Tenable.ot
Published: 4/11/2023
Updated: 9/4/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 4
Temporal Score: 3.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N
CVSS Score Source: CVE-2021-25156
CVSS v3
Risk Factor: Medium
Base Score: 4.9
Temporal Score: 4.4
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:siemens:scalance_w1750d_firmware
Required KB Items: Tenable.ot/Siemens
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/30/2021
Vulnerability Publication Date: 3/30/2021
Reference Information
CVE: CVE-2021-25156
ICSA: 21-131-14