Mai 2025
13.05.2025
SIEMENS CERT
SSA-832273 V1.9 (Last Update: 2025-05-13): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices
Titel
SSA-832273 V1.9 (Last Update: 2025-05-13): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices
Veröffentlicht
13. Mai 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-832273.html
Text
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or ...
13.05.2025
SIEMENS CERT
SSA-819629 V1.2 (Last Update: 2025-05-13): Weak Authentication Vulnerability in Industrial Edge Device Kit
Titel
SSA-819629 V1.2 (Last Update: 2025-05-13): Weak Authentication Vulnerability in Industrial Edge Device Kit
Veröffentlicht
13. Mai 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-819629.html
Text
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge ...
12.05.2025
US CERT
Russian GRU Targeting Western Logistics Entities and Technology Companies
Titel
Russian GRU Targeting Western Logistics Entities and Technology Companies
Veröffentlicht
12. Mai 2025 18:49
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-141a
Text
Executive Summary This joint cybersecurity advisory (CSA) highlights a Russian state-sponsored cyber campaign targeting Western logistics entities and technology companies. This includes those involved in the coordination, transport, and delivery of foreign assistance to Ukraine. Since 2022, Western logistics entities and IT companies have faced an elevated risk of targeting ...
08.05.2025
US CERT (ICS)
Mitsubishi Electric CC-Link IE TSN
Titel
Mitsubishi Electric CC-Link IE TSN
Veröffentlicht
8. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.2 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY Vulnerability: Improper ...
06.05.2025
US CERT (ICS)
Optigo Networks ONS NC600
Titel
Optigo Networks ONS NC600
Veröffentlicht
6. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Optigo Networks Equipment: ONS NC600 Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to establish an authenticated connection with the hard-coded credentials and perform OS command executions. ...
06.05.2025
US CERT (ICS)
Milesight UG65-868M-EA
Titel
Milesight UG65-868M-EA
Veröffentlicht
6. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Milesight Equipment: UG65-868M-EA Vulnerability: Improper Access Control for Volatile Memory Containing Boot Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow any user with admin privileges to inject arbitrary shell commands. 3. TECHNICAL DETAILS ...
06.05.2025
US CERT (ICS)
BrightSign Players
Titel
BrightSign Players
Veröffentlicht
6. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-126-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: BrightSign Equipment: Brightsign Players Vulnerabilities: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for privilege escalation on the device, easily guessed passwords, or for arbitrary code to be executed on ...
01.05.2025
US CERT (ICS)
KUNBUS GmbH Revolution Pi
Titel
KUNBUS GmbH Revolution Pi
Veröffentlicht
1. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: KUNBUS Equipment: Revolution Pi Vulnerabilities: Missing Authentication for Critical Function, Authentication Bypass by Primary Weakness, Improper Neutralization of Server-Side Includes (SSI) Within a Web Page 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers ...
April 2025
25.04.2025
BOSCH PSIRT
Multiple ctrlX OS vulnerabilities
Titel
Multiple ctrlX OS vulnerabilities
Veröffentlicht
25. April 2025 02:00
URL
https://psirt.bosch.com/security-advisories/bosch-sa-640452.html
Text

BOSCH-SA-640452: The base ctrlX OS apps Device Admin and Solutions contain multiple vulnerabilities. In a worst case scenario, a remote authenticated (low-privileged) attacker might be able to execute arbitrary OS commands running with higher privileges. The vulnerabilities have been uncovered and disclosed responsibly by Nozomi. We thank them for making ...

24.04.2025
US CERT (ICS)
Johnson Controls ICU
Titel
Johnson Controls ICU
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: ICU Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Johnson Controls reports the following ...
24.04.2025
US CERT (ICS)
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Titel
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: iSTAR Configuration Utility (ICU) Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Johnson Controls ...
24.04.2025
US CERT (ICS)
Planet Technology Network Products
Titel
Planet Technology Network Products
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Planet Technology Equipment: Planet Technology Network Products Vulnerabilities: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Use of Hard-coded Credentials, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of ...
24.04.2025
US CERT (ICS)
Nice Linear eMerge E3
Titel
Nice Linear eMerge E3
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Nice Equipment: Linear eMerge E3 Vulnerability: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary OS commands. ...
24.04.2025
US CERT (ICS)
Vestel AC Charger
Titel
Vestel AC Charger
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vestel Equipment: AC Charger Vulnerability: Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive information, such as credentials which could ...
24.04.2025
US CERT (ICS)
ALBEDO Telecom Net.Time - PTP/NTP Clock
Titel
ALBEDO Telecom Net.Time - PTP/NTP Clock
Veröffentlicht
24. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: ALBEDO Telecom Equipment: Net.Time - PTP/NTP clock Vulnerability: Insufficient Session Expiration 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to ...
22.04.2025
US CERT (ICS)
Siemens TeleControl Server Basic
Titel
Siemens TeleControl Server Basic
Veröffentlicht
22. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-02
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
22.04.2025
US CERT (ICS)
Siemens TeleControl Server Basic SQL
Titel
Siemens TeleControl Server Basic SQL
Veröffentlicht
22. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
22.04.2025
US CERT (ICS)
Schneider Electric Wiser Home Controller WHC-5918A
Titel
Schneider Electric Wiser Home Controller WHC-5918A
Veröffentlicht
22. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Wiser Home Controller WHC-5918A Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to disclose sensitive credentials. 3. TECHNICAL DETAILS 3.1 ...
22.04.2025
US CERT (ICS)
ABB MV Drives
Titel
ABB MV Drives
Veröffentlicht
22. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: MV Drives Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain full ...
17.04.2025
US CERT (ICS)
Yokogawa Recorder Products
Titel
Yokogawa Recorder Products
Veröffentlicht
17. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Yokogawa Equipment: GX10, GX20, GP10, GP20, GM Data Acquisition System, DX1000, DX2000, DX1000N, FX1000, μR10000, μR20000, MW100, DX1000T, DX2000T, CX1000, CX2000 Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could ...
17.04.2025
US CERT (ICS)
Schneider Electric Trio Q Licensed Data Radio
Titel
Schneider Electric Trio Q Licensed Data Radio
Veröffentlicht
17. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.4 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Trio Q Licensed Data Radio Vulnerabilities: Insecure Storage of Sensitive Information, Initialization of a Resource with an Insecure Default 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access confidential ...
17.04.2025
US CERT (ICS)
Schneider Electric ConneXium Network Manager
Titel
Schneider Electric ConneXium Network Manager
Veröffentlicht
17. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: ConneXium Network Manager Vulnerabilities: Files or Directories Accessible to External Parties, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data, escalate privileges, or ...
17.04.2025
US CERT (ICS)
Schneider Electric Sage Series
Titel
Schneider Electric Sage Series
Veröffentlicht
17. April 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Sage series Vulnerabilities: Out-of-bounds Write, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Incorrect Default Permissions, Unchecked Return Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds ...
17.04.2025
SIEMENS CERT
SSA-819629 V1.1 (Last Update: 2025-04-17): Weak Authentication Vulnerability in Industrial Edge Device Kit
Titel
SSA-819629 V1.1 (Last Update: 2025-04-17): Weak Authentication Vulnerability in Industrial Edge Device Kit
Veröffentlicht
17. April 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-819629.html
Text
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge ...
16.04.2025
SIEMENS CERT
SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Titel
SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Veröffentlicht
16. April 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-366067.html
Text
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or ...

Letzte Updates

BOSCH PSIRT
14.08.2025
SIEMENS CERT
26.08.2025
US CERT
25.08.2025
US CERT (ICS)
04.09.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds