Bulletins | CERT@VDE

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Titel

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-357412.html

Text

NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on ...

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Titel

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Text

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Titel

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-659443.html

Text

COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Titel

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-180704.html

Text

SCALANCE M-800 family before V8.0 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

SSA-999588 V1.4 (Last Update: 2024-08-13): Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2

Titel

SSA-999588 V1.4 (Last Update: 2024-08-13): Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-999588.html

Text

Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes ...

SSA-716317 V1.0: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0

Titel

SSA-716317 V1.0: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-716317.html

Text

SINEC Traffic Analyzer before V2.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Titel

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Veröffentlicht

13. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Text

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

12.08.2024

US CERT

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Titel

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Veröffentlicht

12. August 2024 19:38

URL

https://www.cisa.gov/news-events/alerts/2024/08/13/cisa-adds-six-known-exploited-vulnerabilities-catalog

Text

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege ...

08.08.2024

Dorsett Controls InfoScan

Titel

Dorsett Controls InfoScan

Veröffentlicht

8. August 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dorsett Controls Equipment: InfoScan Vulnerabilities: Exposure of Sensitive Information To An Unauthorized Actor, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and ...

07.08.2024

BOSCH PSIRT

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Titel

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Veröffentlicht

7. August 2024 02:00

URL

https://psirt.bosch.com/security-advisories/bosch-sa-587194-bt.html

Text

BOSCH-SA-587194-BT: DIVAR IP System Manager is a central user interface that provides an easy system setup, configuration and application software upgrades through an easily accessible web-based application. Multiple Curl vulnerabilities in the Git for Windows component have been discovered in DIVAR IP System Manager versions prior to 2.3.2, affecting several ...

02.08.2024

US CERT

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Titel

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Veröffentlicht

2. August 2024 19:17

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a

Text

EXECUTIVE SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is ...

02.08.2024

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Titel

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Veröffentlicht

2. August 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-857368.html

Text

Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges. Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions still under maintenance and recommends countermeasures for products where fixes are not, or not ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07

AVTECH IP Camera

Titel

AVTECH IP Camera

Veröffentlicht

1. August 2024 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: AVTECH SECURITY Corporation Equipment: IP camera Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the ...

Johnson Controls exacqVision Server Web Service

Titel

Johnson Controls exacqVision Server Web Service

Veröffentlicht

1. August 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Web Service Vulnerability: Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send an unauthorized request or access data from an untrusted domain. ...

Johnson Controls exacqVision Web Service

Titel

Johnson Controls exacqVision Web Service

Veröffentlicht

1. August 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable remotely Vendor: Johnson Controls, Inc. Equipment: exacqVision Web Service Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and gain access to sensitive information. 3. TECHNICAL ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08

Vonets WiFi Bridges

Titel

Vonets WiFi Bridges

Veröffentlicht

1. August 2024 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vonets Equipment: VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000 Vulnerabilities: Use of Hard-coded Credentials, Improper Access Control, Path Traversal, Command Injection, Improper Check or Handling of Exceptional ...

Johnson Controls exacqVision Client and exacqVision Server

Titel

Johnson Controls exacqVision Client and exacqVision Server

Veröffentlicht

1. August 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.0 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Client, exacqVision Server key Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due ...

Juli 2024

25.07.2024

Positron Broadcast Signal Processor

Titel

Positron Broadcast Signal Processor

Veröffentlicht

25. Juli 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Positron S.R.L Equipment: Broadcast Signal Processor TRA7005 Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access ...

24.07.2024

US CERT

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Titel

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Veröffentlicht

24. Juli 2024 18:37

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a

Text

Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: U.S. Cyber National Mission Force (CNMF) U.S. ...

23.07.2024

National Instruments LabVIEW

Titel

National Instruments LabVIEW

Veröffentlicht

23. Juli 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-03

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: LabVIEW Vulnerabilities: Out-of-Bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a local attacker to disclose information and execute arbitrary ...

23.07.2024

Hitachi Energy AFS/AFR Series Products

Titel

Hitachi Energy AFS/AFR Series Products

Veröffentlicht

23. Juli 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS650, AFS660, AFS665, AFS670, AFS675, AFS677, AFR677 Vulnerabilities: Type Confusion, Use After Free, Double Free, Observable Discrepancy 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service ...

23.07.2024

National Instruments IO Trace

Titel

National Instruments IO Trace

Veröffentlicht

23. Juli 2024 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: IO Trace Vulnerability: Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following National Instruments I/O ...

22.07.2024

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Titel

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Veröffentlicht

22. Juli 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-071402.html

Text

Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: SICAM A8000 Device firmware CPCI85 for CP-8031/CP-8050 SICAM EGS Device firmware CPCI85 SICAM 8 Software Solution SICORE Siemens has released new firmware versions for the ...

22.07.2024