SSA-462066 V3.1 (Last Update: 2023-04-11): Vulnerability known as TCP SACK PANIC in Industrial Products

Affected Product and Versions Remediation RUGGEDCOM APE1404 Linux
All versions < Debian 9 Linux Image 2019-12-13
only affected by CVE-2019-11479

Apply the latest available Debian patches

https://support.industry.siemens.com/cs/ww/en/view/109773487 See further recommendations from section Workarounds and Mitigations RUGGEDCOM RM1224 family (6GK6108-4AM00)
All versions < V6.2

Update to V6.2 or later version

https://support.industry.siemens.com/cs/document/109778305 See further recommendations from section Workarounds and Mitigations RUGGEDCOM ROX II
All versions < V2.13.3
only affected by CVE-2019-11479

Update to V2.13.3 or later version

https://support.industry.siemens.com/cs/document/109778537 See further recommendations from section Workarounds and Mitigations RUGGEDCOM RX1400 VPE Debian Linux
All versions < Debian 9 Linux Image 2019-12-13
only affected by CVE-2019-11479

Apply the latest available Debian patches in the VPE

https://support.industry.siemens.com/cs/ww/en/view/109773485 See further recommendations from section Workarounds and Mitigations RUGGEDCOM RX1400 VPE Linux CloudConnect
All versions < Debian 9 Linux Image 2019-12-13
only affected by CVE-2019-11479

Apply the latest available Debian patches in the VPE or apply the latest CloudConnect VPE Linux image

https://support.industry.siemens.com/cs/ww/en/view/109773486 See further recommendations from section Workarounds and Mitigations

Read more

Explore the site

More from the blog

Latest News