Details
-
Type:
Change
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: V5.8.0.5 (open)
-
Labels:None
-
Account:SPC Profinet Slave V5 operational (SPCPROFINE)
Description
This update satisfies security scanner tools which may be unhappy with firmwares using LWIP versions with known CVE vulneratbilities.
These vulnerabilities do not apply to Profinet firmwares, as the vulnerable parts (SNMPv3, IPv6) are not used by Profinet.
Attachments
Issue Links
- is cloned by
-
PSPNSV4-1676
update integrated IP stack to LWIP V5.5.0.4
-
- Resolved
-
- relates to
-
PSLWIP-572 fix CVE 2020-22283 in ICMP6 handling (only relevant for IPv6 users)
-
- Closed
-
-
PSLWIP-573 fix CVE 2026-8836 for SNMPv3 users
-
- Closed
-
-
PSLWIP-579 ARP Replies Accepted Without Prior ARP Request
-
- Closed
-