Siemens is aware of the new security vulnerabilities in the Treck TCP/IP stack, disclosed on 2020-12-08 on Treck, Inc.'s advisory page.
No Siemens product is known to use Treck Inc.'s TCP/IP stack, or otherwise be affected by the reported vulnerabilities.
Siemens is aware of the security vulnerabilities in several TCP/IP stacks, also named "AMNESIA:33" and disclosed on 2020-12-08. The impact to Siemens products is described in the Security Advisory SSA-541017, published on 2020-12-08 on the same day.
Siemens is aware of the recently disclosed set of security vulnerabilities in Treck, Inc.'s TCP/IP stack, known as Ripple20, disclosed by the JSOF research lab. Siemens experts had conducted an internal investigation to assess impact on Siemens products. No Siemens product is known to use Treck Inc.'s TCP/IP stack, or otherwise be affected by the reported vulnerabilities.
Siemens has released an updated version 2.1 of the Operational Guidelines for Industrial Security.
The guidelines provide recommendations for the secure operation of plant and machinery in industrial environments, including a 'Defense-in-Depth' security concept.
Version 2.1 replaces all former versions of the guidelines and is referenced in Siemens Security Advisories related with Siemens Industrial Products.