Bulletins | CERT@VDE

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Titel

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Text

Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation. The ...

SSA-874353 V1.0: Entity Enumeration Vulnerability in Mendix Runtime

Titel

SSA-874353 V1.0: Entity Enumeration Vulnerability in Mendix Runtime

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Text

Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...

SSA-819629 V1.0: Weak Authentication Vulnerability in Industrial Edge Device Kit

Titel

SSA-819629 V1.0: Weak Authentication Vulnerability in Industrial Edge Device Kit

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-819629.html

Text

Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings within the open Industrial Edge ecosystem. See further details about affected Industrial Edge Devices ...

SSA-770770 V1.2 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Titel

SSA-770770 V1.2 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-770770.html

Text

Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices

Titel

SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-767615.html

Text

An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products ...

SSA-364175 V1.5 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Titel

SSA-364175 V1.5 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Text

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Titel

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-686975.html

Text

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update (“2022.3 IPU – BIOS Advisory” Intel-SA-00688). Siemens has released new versions for several affected products and ...

SSA-354569 V1.3 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Titel

SSA-354569 V1.3 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-354569.html

Text

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. [1] https://security.paloaltonetworks.com/

SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP

Titel

SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-503939.html

Text

Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-398330 V2.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Titel

SSA-398330 V2.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Text

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3

Titel

SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-525431.html

Text

Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.

SSA-187636 V1.0: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager

Titel

SSA-187636 V1.0: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-187636.html

Text

SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Siemens recommends to replace the device by the new SENTRON 7KT PAC1261 ...

SSA-369369 V1.1 (Last Update: 2025-04-08): Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagM...

Titel

SSA-369369 V1.1 (Last Update: 2025-04-08): Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-369369.html

Text

SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-277137 V1.0: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700

Titel

SSA-277137 V1.0: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-277137.html

Text

SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Titel

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Veröffentlicht

8. April 2025 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-634640.html

Text

Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

Titel

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

Veröffentlicht

3. April 2025 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: DCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCT880 memory unit incl. Power Optimizer, DCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCS880 memory unit incl. DEMag, DCS880 ...

Hitachi Energy TRMTracker

Titel

Hitachi Energy TRMTracker

Veröffentlicht

3. April 2025 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: TRMTracker Vulnerabilities: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection'), Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Neutralization of Input During Web ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05

B&R APROL

Titel

B&R APROL

Veröffentlicht

3. April 2025 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: B&R Equipment: APROL Vulnerabilities: Inclusion of Functionality from Untrusted Control Sphere, Incomplete Filtering of Special Elements, Improper Control of Generation of Code ('Code Injection'), Improper Handling of Insufficient Permissions or Privileges , Allocation of Resources Without ...

Hitachi Energy RTU500 Series

Titel

Hitachi Energy RTU500 Series

Veröffentlicht

3. April 2025 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Vulnerabilities: Null Pointer Dereference, Insufficient Resource Pool, Missing Synchronization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

ABB ACS880 Drives Containing CODESYS RTS

Titel

ABB ACS880 Drives Containing CODESYS RTS

Veröffentlicht

3. April 2025 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-03

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: ACS880 Drives with IEC 61131-3 license Vulnerabilities: Improper Input Validation, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an ...

01.04.2025

US CERT

Fast Flux: A National Security Threat

Titel

Fast Flux: A National Security Threat

Veröffentlicht

1. April 2025 21:00

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-093a

Text

Executive summary Many networks have a gap in their defenses for detecting and blocking a malicious technique known as “fast flux.” This technique poses a significant threat to national security, enabling malicious cyber actors to consistently evade detection. Malicious cyber actors, including cybercriminals and nation-state actors, use fast flux to ...

01.04.2025

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

Titel

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

Veröffentlicht

1. April 2025 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-091-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Lifecycle Services with Veeam Backup and Replication Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target ...

März 2025

25.03.2025

Inaba Denki Sangyo CHOCO TEI WATCHER mini

Titel

Inaba Denki Sangyo CHOCO TEI WATCHER mini

Veröffentlicht

25. März 2025 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Inaba Denki Sangyo Co., Ltd. Equipment: CHOCO TEI WATCHER mini Vulnerabilities: Use of Client-Side Authentication, Storing Passwords in a Recoverable Format, Weak Password Requirements, Direct Request ('Forced Browsing') 2. RISK EVALUATION Successful exploitation of these vulnerabilities ...

25.03.2025

Rockwell Automation 440G TLS-Z

Titel

Rockwell Automation 440G TLS-Z

Veröffentlicht

25. März 2025 13:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-084-03

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION: High attack complexity Vendor: Rockwell Automation Equipment: 440G TLS-Z Vulnerability: Improper Neutralization of Special Elements in Output Used by a Downstream Component 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take over the device. 3. TECHNICAL ...

25.03.2025