NewsSiemens ProductCERT

    SSA-623229 (Last Update: 2020-02-10): DROWN Vulnerability in Industrial Products

    Share
    The disclosed attack called DROWN (Decrypting RSA with Obsolete and Weakened eNcryption), also known as CVE-2016-0800, could potentially allow the decryption of SSL/TLS sessions of some Siemens industrial products under certain conditions. Siemens has released firmware updates and solutions to resolve the vulnerability

    Linked advisories

    Affected vendors and products

    Source: https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf

    ID