November 2021
09.11.2021
SIEMENS CERT
SSA-537983 V1.0: Local Code Execution Vulnerability in SENTRON powermanager V3
Titel
SSA-537983 V1.0: Local Code Execution Vulnerability in SENTRON powermanager V3
Veröffentlicht
9. November 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-537983.pdf
Text
SENTRON powermanager V3 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released a security patch for SENTRON powermanager V3.6 HF1 and recommends to update to the latest version and apply this patch.
09.11.2021
SIEMENS CERT
SSA-338732 V1.0: Information Disclosure Vulnerability in Mendix
Titel
SSA-338732 V1.0: Information Disclosure Vulnerability in Mendix
Veröffentlicht
9. November 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdf
Text
Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache. Mendix has released updates for the affected product lines, ...
09.11.2021
SIEMENS CERT
SSA-328042 V1.0: File Parsing Vulnerabilities in OBJ Translator in NX
Titel
SSA-328042 V1.0: File Parsing Vulnerabilities in OBJ Translator in NX
Veröffentlicht
9. November 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf
Text
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads OBJ files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary code execution on the target host system. ...
09.11.2021
SIEMENS CERT
SSA-145157 V1.0: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12
Titel
SSA-145157 V1.0: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager before V2.12
Veröffentlicht
9. November 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-145157.pdf
Text
SIMATIC RTLS Locating Manager before V2.12 contains multiple vulnerabilities that could allow an attacker to read sensitive data or trigger a denial-of-service condition of the application service. Siemens has released an update for the SIMATIC RTLS Locating Manager and recommends to update to the latest version.
09.11.2021
SIEMENS CERT
SSA-114589 V1.0: Multiple Vulnerabilities in Nucleus RTOS based APOGEE and TALON Products
Titel
SSA-114589 V1.0: Multiple Vulnerabilities in Nucleus RTOS based APOGEE and TALON Products
Veröffentlicht
9. November 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf
Text
Multiple vulnerabilities (also known as “NUCLEUS:13”) have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens recommends specific countermeasures for products where updates are ...
04.11.2021
US CERT (ICS)
VISAM VBASE Editor
Titel
VISAM VBASE Editor
Veröffentlicht
4. November 2021 15:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-308-01
Text
This advisory contains mitigations for Improper Access Control, Cross-site Scripting, Using Components with Known Vulnerabilities, and Improper Restriction of XML External Entity Reference vulnerabilities in the VISAM VBASE Editor automation platform.
Oktober 2021
21.10.2021
US CERT (ICS)
B. Braun Infusomat Space Large Volume Pump
Titel
B. Braun Infusomat Space Large Volume Pump
Veröffentlicht
21. Oktober 2021 16:15
URL
https://us-cert.cisa.gov/ics/advisories/icsma-21-294-01
Text
This advisory contains mitigation for Unrestricted Upload of File with Dangerous Type, Cleartext Transmission of Sensitive Information, Missing Authentication for Critical Function, Insufficient Verification of Data Authenticity, and Improper Input Validation vulnerabilities in the B. Braun Infusomat Space Large Volume Pump.
21.10.2021
US CERT (ICS)
ICONICS GENESIS64 and Mitsubishi Electric MC Works64
Titel
ICONICS GENESIS64 and Mitsubishi Electric MC Works64
Veröffentlicht
21. Oktober 2021 16:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-294-01
Text
This advisory contains mitigations for Out-of-bounds Read, and Out-of-bounds Write vulnerabilities in ICONICS GENESIS64 and Mitsubishi Electric MC Works64 HMI SCADA systems.
21.10.2021
US CERT (ICS)
Delta Electronics DIALink
Titel
Delta Electronics DIALink
Veröffentlicht
21. Oktober 2021 16:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
Text
This advisory contains mitigations for Cleartext Transmission of Sensitive Information, Cross-site Scripting, Improper Neutralization of Formula Elements in a CSV File, Cleartext Storage of Sensitive Information, Uncontrolled Search Path Element, and Incorrect Default Permissions vulnerabilities in the Delta Electronics DIALink industrial automation server.
21.10.2021
US CERT (ICS)
ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA
Titel
ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA
Veröffentlicht
21. Oktober 2021 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-294-03
Text
This advisory contains mitigations for an Uncontrolled Recursion vulnerability in ICONICS GENESIS64, Mitsubishi Electric MC Works64 third-party OPC Foundation products.
19.10.2021
US CERT (ICS)
AUVESY Versiondog
Titel
AUVESY Versiondog
Veröffentlicht
19. Oktober 2021 16:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-292-01
Text
This advisory contains mitigations for numerous vulnerabilities in AUVESY Versiondog data management software for automated production.
19.10.2021
US CERT (ICS)
Trane HVAC Systems Controls
Titel
Trane HVAC Systems Controls
Veröffentlicht
19. Oktober 2021 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-292-02
Text
This advisory contains mitigations for a Cross-site Scripting vulnerability in Trane Tracer SC HVAC building automation products.
18.10.2021
US CERT
AA21-291A: BlackMatter Ransomware
Titel
AA21-291A: BlackMatter Ransomware
Veröffentlicht
18. Oktober 2021 19:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa21-291a
Text
Original release date: October 18, 2021SummaryActions You Can Take Now to Protect Against BlackMatter Ransomware • Implement and enforce backup and restoration policies and procedures. • Use strong, unique passwords. • Use multi-factor authentication. • Implement network segmentation and traversal monitoring. Note: this advisory uses the MITRE Adversarial Tactics, Techniques, ...
15.10.2021
US CERT (ICS)
Schneider Electric CNM
Titel
Schneider Electric CNM
Veröffentlicht
15. Oktober 2021 05:45
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-01
Text
This advisory contains mitigations for an proper Privilege Management vulnerability in Schneider Electric ConneXium Network Manager (CNM) software.
15.10.2021
US CERT (ICS)
Uffizio GPS Tracker
Titel
Uffizio GPS Tracker
Veröffentlicht
15. Oktober 2021 05:40
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-02
Text
This advisory contains mitigations for mproper Access Control, Unrestricted Upload of File with Dangerous Type, Open Redirect, Cross-site Scripting, and Cross-site Request Forgery vulnerabilities in Uffizio GPS Tracker software.
14.10.2021
US CERT
AA21-287A: Ongoing Cyber Threats to U.S. Water and Wastewater Systems
Titel
AA21-287A: Ongoing Cyber Threats to U.S. Water and Wastewater Systems
Veröffentlicht
14. Oktober 2021 20:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa21-287a
Text
Original release date: October 14, 2021SummaryImmediate Actions WWS Facilities Can Take Now to Protect Against Malicious Cyber Activity • Do not click on suspicious links. • If you use RDP, secure and monitor it. • Use strong passwords. • Use multi-factor authentication. Note: This advisory uses the MITRE Adversarial Tactics, ...
14.10.2021
US CERT (ICS)
Siemens SINEC NMS
Titel
Siemens SINEC NMS
Veröffentlicht
14. Oktober 2021 17:25
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-05
Text
This advisory contains mitigations for Improper Limitation of a Pathname to a Restricted Directory, Improper Authorization, Exposure of Sensitive Information to an Unauthorized Actor, Deserialization of Untrusted Data, and Improper Neutralization of Special Elements used in an SQL Command vulnerabilities in Siemens SINEC NMS network management software.
14.10.2021
US CERT (ICS)
Siemens SCALANCE
Titel
Siemens SCALANCE
Veröffentlicht
14. Oktober 2021 17:15
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-07
Text
This advisory contains mitigations for Cross-site Request Forgery, OS Command Injection, Classic Buffer Overflow, Command Injection, Path Traversal, and Missing Encryption of Sensitive Data vulnerabilities in the Siemens SCALANCE software management platform.
14.10.2021
US CERT (ICS)
Siemens RUGGEDCOM ROX Devices
Titel
Siemens RUGGEDCOM ROX Devices
Veröffentlicht
14. Oktober 2021 17:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-08
Text
This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in Siemens RUGGEDCOM ROX switches and serial-to-Ethernet devices.
14.10.2021
US CERT (ICS)
Siemens SIMATIC Process Historian
Titel
Siemens SIMATIC Process Historian
Veröffentlicht
14. Oktober 2021 17:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-287-09
Text
This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in Siemens SIMATIC Process Historian, a long-term archive system.
14.10.2021
US CERT (ICS)
Siemens RUGGEDCOM ROX (Update A)
Titel
Siemens RUGGEDCOM ROX (Update A)
Veröffentlicht
14. Oktober 2021 17:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-259-01
Text
This updated advisory is a follow-up to the original advisory titled ICSA-21-259-01 Siemens RUGGEDCOM ROX that was published September 16, 2021, to the ICS webpage on us-cert.cisa.gov. This advisory contains mitigations for Improper Privilege Management, Execution with Unnecessary Privileges, and Improper Handling of Insufficient Permissions or Privileges vulnerabilities in Siemens ...
12.10.2021
US CERT (ICS)
Advantech WebAccess SCADA
Titel
Advantech WebAccess SCADA
Veröffentlicht
12. Oktober 2021 16:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-285-01
Text
This advisory contains mitigations for a Missing Authorization vulnerability in the Advantech WebAccess SCADA HMI platform.
12.10.2021
US CERT (ICS)
Schneider Electric IGSS
Titel
Schneider Electric IGSS
Veröffentlicht
12. Oktober 2021 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-285-03
Text
This advisory contains mitigations for Classic Buffer Overflow, Unrestricted Upload of File with Dangerous Type, Path Traversal, and Missing Authentication for Critical Function vulnerabilities in Schneider Electric IGSS (Interactive Graphical SCADA System) software.
12.10.2021
SIEMENS CERT
SSA-280624 V1.0: Multiple Vulnerabilities in SCALANCE W1750D
Titel
SSA-280624 V1.0: Multiple Vulnerabilities in SCALANCE W1750D
Veröffentlicht
12. Oktober 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
Text
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or trigger buffer overflows. Siemens is preparing updates and recommends countermeasures for products where updates are not, or not yet available.
12.10.2021
SIEMENS CERT
SSA-178380 V1.0: Denial-of-Service Vulnerability in SINUMERIK Controllers
Titel
SSA-178380 V1.0: Denial-of-Service Vulnerability in SINUMERIK Controllers
Veröffentlicht
12. Oktober 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-178380.pdf
Text
A Denial-of-Service vulnerability found in SINUMERIK Controllers could allow an unauthenticated attacker with network access to the affected devices to cause system failure with total loss of availability. Siemens has released an update for the SINUMERIK 828D and recommends to update to the latest version. Siemens recommends specific countermeasures for ...

Letzte Updates

BOSCH PSIRT
10.06.2025
SIEMENS CERT
17.06.2025
US CERT
12.06.2025
US CERT (ICS)
12.06.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds