CVE:CVE-2021-37182
CNNVD:CNNVD-202206-1281
Siemens SCALANCE是德国西门子（Siemens）公司的一系列以太网交换机。可连接到工业控制系统 (ICS) 设备，包括可编程逻辑控制器 (PLC) 和人机界面 (HMI) 系统。
Siemens SCALANCE 存在安全漏洞，该漏洞源于设备中的 OSPF 协议实现无法验证 OSPF LS 更新消息中的校验和和长度字段，远程攻击者利用该漏洞可以通过发送特制的 OSPF 数据包来导致网络中断，以下产品和版本受到影响：SCALANCE XM408-4C（V6.5之前版本），SCALANCE XM408-4C（L3 int.）（ V6.5之前版本），SCALANCE XM408-8C（V6.5之前版本），SCALANCE XM408-8C (L3 int.) ( V6.5之前版本)，SCALANCE XM416-4C (V6.5之前版本),SCALANCE XM416-4C (L3 int.) (V6.5之前版本)，SCALANCE XR524-8C 1x230V (V6.5之前版本), SCALANCE XR524-8C 1x230V (L3 int.) ( V6.5之前版本), SCALANCE XR524-8C 24V (V6.5之前版本), SCALANCE XR524-8C 24V (L3 int.) (V6.5之前版本), SCALANCE XR524-8C 2x230V (V6.5之前版本), SCALANCE XR524-8C, 2x230V (L3 int.) (V6.5之前版本), SCALANCE XR526-8C, 1x230V (V6.5之前版本), SCALANCE XR526-8C, 1x230V (L3 int.) (V6.5之前版本), SCALANCE XR526-8C, 24V (V6.5之前版本), SCALANCE XR526-8C, 24V (L3 int.) (V6.5之前版本), SCALANCE XR526-8C, 2x230V (V6.5之前版本), SCALANCE XR526-8C, 2x230V (L3 int.) （V6.5之前版本），SCALANCE XR528-6M（V6.5之前版本），SCALANCE XR528-6M (2HR2) (V6.5之前版本), SCALANCE XR528-6M (2HR2, L3 int.) (V6.5之前版本), SCALANCE XR528-6M (L3 int.) (V6.5之前版本), SCALANCE XR552-12M (V6.5之前版本), SCALANCE XR552-12M (2HR2) (V6.5之前版本), SCALANCE XR552-12M (2HR2) (V6.5之前版本), SCALANCE XR552 -12M (2HR2, L3 int.) (V6.5之前版本)。
solution:Upgrade siemens scalance_xm408-4c_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xm408-4c_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xm408-8c_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xm408-8c_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xm416-4c_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xm416-4c_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr524-8c_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr524-8c_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr526-8c_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr526-8c_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr528-6m_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr528-6m_2hr2_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr528-6m_2hr2_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr528-6m_l3_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr552-12m_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr552-12m_2hr2_firmware to a higher version than 6.5,and avoid the version (,6.5); Upgrade siemens scalance_xr552-12m_2hr2_l3_firmware to a higher version than 6.5,and avoid the version (,6.5)