Bulletins | CERT@VDE

ABB FLXEON Controllers

Title

ABB FLXEON Controllers

Published

Feb. 20, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: FLXEON Controllers Vulnerabilities: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion'), Missing Origin Validation in WebSockets, Insertion of Sensitive Information into Log File 2. RISK EVALUATION Successful exploitation ...

Rapid Response Monitoring My Security Account App

Title

Rapid Response Monitoring My Security Account App

Published

Feb. 20, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rapid Response Monitoring Equipment: My Security Account App Vulnerability: Authorization Bypass Through User-Controlled Key 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attacker to access sensitive information of other users. 3. TECHNICAL DETAILS 3.1 ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-03

Carrier Block Load

Title

Carrier Block Load

Published

Feb. 20, 2025, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Carrier Equipment: Block Load Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges . 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS ...

ABB ASPECT-Enterprise, NEXUS, and MATRIX Series

Title

ABB ASPECT-Enterprise, NEXUS, and MATRIX Series

Published

Feb. 20, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: ASPECT-Enterprise, NEXUS, and MATRIX series Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain access to devices without proper authentication. 3. TECHNICAL DETAILS 3.1 ...

Elseta Vinci Protocol Analyzer

Title

Elseta Vinci Protocol Analyzer

Published

Feb. 20, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Elseta Equipment: Vinci Protocol Analyzer Vulnerability: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform ...

19.02.2025

US CERT

#StopRansomware: Ghost (Cring) Ransomware

Title

#StopRansomware: Ghost (Cring) Ransomware

Published

Feb. 19, 2025, 5:38 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-050a

Summary

Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect ...

19.02.2025

SSA-354569 V1.2 (Last Update: 2025-02-19): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Title

SSA-354569 V1.2 (Last Update: 2025-02-19): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Published

Feb. 19, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-354569.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. [1] https://security.paloaltonetworks.com/

17.02.2025

SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated

Title

SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated

Published

Feb. 17, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-992434.html

Summary

SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore. Siemens has released a new version for SiPass integrated and recommends ...

14.02.2025

SSA-246355 V1.1 (Last Update: 2025-02-14): Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence

Title

SSA-246355 V1.1 (Last Update: 2025-02-14): Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence

Published

Feb. 14, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-246355.html

Summary

The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below. Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version of Tableau Server as described in https://support.sw.siemens.com/knowledge-base/PL8822108.

Siemens SIMATIC PCS neo and TIA Administrator

Title

Siemens SIMATIC PCS neo and TIA Administrator

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-13

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Title

Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-12

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-08

Siemens OpenV2G

Title

Siemens OpenV2G

Published

Feb. 13, 2025, 1 p.m.

URL

Summary

Siemens SCALANCE W700

Title

Siemens SCALANCE W700

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09

Summary

Dingtian DT-R0 Series

Title

Dingtian DT-R0 Series

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-18

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dingtian Equipment: DT-R0 Series Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify the device settings and gain administrator access. 3. ...

Siemens Opcenter Intelligence

Title

Siemens Opcenter Intelligence

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-14

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-03

Siemens SIPROTEC 5

Title

Siemens SIPROTEC 5

Published

Feb. 13, 2025, 1 p.m.

URL

Summary

Siemens SIMATIC S7-1200 CPU Family

Title

Siemens SIMATIC S7-1200 CPU Family

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-01

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-15

ORing IAP-420

Title

ORing IAP-420

Published

Feb. 13, 2025, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: ORing Equipment: IAP-20 Vulnerabilities: Cross-site Scripting, Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to invoke commands to compromise the device via the management interface. 3. TECHNICAL ...

Outback Power Mojave Inverter

Title

Outback Power Mojave Inverter

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Outback Power Equipment: Mojave Inverter Vulnerabilities: Use of GET Request Method With Sensitive Query Strings, Exposure of Sensitive Information to an Unauthorized Actor, Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an ...

Siemens APOGEE PXC and TALON TC Series

Title

Siemens APOGEE PXC and TALON TC Series

Published

Feb. 13, 2025, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-11

Summary

SSA-196737 V1.1 (Last Update: 2025-02-11): Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2

Title

SSA-196737 V1.1 (Last Update: 2025-02-11): Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2

Published

Feb. 11, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-196737.html

Summary

SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.

SSA-832273 V1.6 (Last Update: 2025-02-11): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices

Title

SSA-832273 V1.6 (Last Update: 2025-02-11): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices

Published

Feb. 11, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-832273.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-111547 V1.0: Cleartext Storage of Sensitive Information Vulnerability in SIPROTEC 5

Title

SSA-111547 V1.0: Cleartext Storage of Sensitive Information Vulnerability in SIPROTEC 5

Published

Feb. 11, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-111547.html

Summary

Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are ...

SSA-195895 V1.0: User Enumeration Vulnerability in the Webserver of SIMATIC Products

Title

SSA-195895 V1.0: User Enumeration Vulnerability in the Webserver of SIMATIC Products

Published

Feb. 11, 2025, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-195895.html

Summary

The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...