Bulletins | CERT@VDE

SSA-363107 V1.3 (Last Update: 2023-10-10): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Titel

SSA-363107 V1.3 (Last Update: 2023-10-10): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-363107.html

Text

A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-134651 V1.0: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices

Titel

SSA-134651 V1.0: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-134651.html

Text

The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug support are affected. Siemens has released updates for the affected products ...

SSA-035466 V1.0: Incorrect Permission Assignment in SICAM PAS/PQS

Titel

SSA-035466 V1.0: Incorrect Permission Assignment in SICAM PAS/PQS

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-035466.html

Text

SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges. Siemens has prepared a security patch and recommends to run it on affected systems to fix the permissions of the impacted folders. ...

SSA-386812 V1.0: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1

Titel

SSA-386812 V1.0: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-386812.html

Text

Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process. Siemens has released an update for Simcenter Amesim and recommends to update to the latest version.

SSA-413565 V1.3 (Last Update: 2023-10-10): Multiple Vulnerabilities in SCALANCE Products

Titel

SSA-413565 V1.3 (Last Update: 2023-10-10): Multiple Vulnerabilities in SCALANCE Products

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-413565.html

Text

Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for the affected products and recommends to update to the latest ...

SSA-843070 V1.0: Multiple Vulnerabilities in SCALANCE W1750D

Titel

SSA-843070 V1.0: Multiple Vulnerabilities in SCALANCE W1750D

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-843070.html

Text

The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated remote code execution. Siemens has released updates for the affected products and recommends to update to the ...

SSA-829656 V1.0: Stack Overflow Vulnerability in Xpedition Layout Browser

Titel

SSA-829656 V1.0: Stack Overflow Vulnerability in Xpedition Layout Browser

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-829656.html

Text

Siemens Xpedition Layout Browser consists of a stack overflow vulnerability that could be triggered when the application reads a malicious file in PCB format. If a user is tricked to open a malicious file with the affected product, this could lead the application to crash or potentially lead to arbitrary ...

SSA-784849 V1.0: Direct Memory Access Vulnerabilities in SIMATIC CP Devices

Titel

SSA-784849 V1.0: Direct Memory Access Vulnerabilities in SIMATIC CP Devices

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-784849.html

Text

Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-285795 V1.4 (Last Update: 2023-10-10): Denial of Service in OPC-UA in Industrial Products

Titel

SSA-285795 V1.4 (Last Update: 2023-10-10): Denial of Service in OPC-UA in Industrial Products

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-285795.html

Text

A vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has released updates for the affected products and recommends to update to ...

SSA-240541 V1.1 (Last Update: 2023-10-10): WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products

Titel

SSA-240541 V1.1 (Last Update: 2023-10-10): WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-240541.html

Text

WIBU Systems published information about a heap buffer overflow vulnerability and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products for license management. The vulnerability is described in the section “Vulnerability Classification” below and got assigned the CVE ID CVE-2023-3935. ...

SSA-250085 V1.3 (Last Update: 2023-10-10): Multiple Vulnerabilities in SINEC NMS and SINEMA Server

Titel

SSA-250085 V1.3 (Last Update: 2023-10-10): Multiple Vulnerabilities in SINEC NMS and SINEMA Server

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-250085.html

Text

SINEC NMS and SINEMA Server V14 contain multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released several updates for SINEC NMS and recommends to update to the latest version. Siemens recommends specific ...

SSA-295483 V1.0: User Enumeration Vulnerability in Mendix Forgot Password Module

Titel

SSA-295483 V1.0: User Enumeration Vulnerability in Mendix Forgot Password Module

Veröffentlicht

10. Oktober 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-295483.html

Text

The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.

05.10.2023

Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products

Titel

Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products

Veröffentlicht

5. Oktober 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-278-01

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS65x, AFF66x, AFS67x, AFR67x Series Vulnerabilities: Incorrect Calculation, Integer Overflow or Wraparound, Improper Encoding or Escaping of Output, Exposure of Resource to Wrong Sphere 2. RISK EVALUATION Successful exploitation of these vulnerabilities by ...

05.10.2023

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Titel

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Veröffentlicht

5. Oktober 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-278-03

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: CC-Link IE TSN Industrial Managed Switch Vulnerabilities: Observable Timing Discrepancy, Double Free 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in disclosure of information stored in the product by sending specially ...

05.10.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-278-02

Qognify NiceVision

Titel

Qognify NiceVision

Veröffentlicht

5. Oktober 2023 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Qognify Equipment: NiceVision Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to retrieve sensitive information about the cameras managed by the platform and its users. 3. TECHNICAL ...

02.10.2023

US CERT

NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations

Titel

NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations

Veröffentlicht

2. Oktober 2023 21:42

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a

Text

A plea for network defenders and software manufacturers to fix common problems. EXECUTIVE SUMMARY The National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint cybersecurity advisory (CSA) to highlight the most common cybersecurity misconfigurations in large organizations, and detail the tactics, techniques, and procedures ...

September 2023

28.09.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-271-02

DEXMA DexGate

Titel

DEXMA DexGate

Veröffentlicht

28. September 2023 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: DEXMA Equipment: DEXGate Vulnerabilities: Cross-Site Scripting, Cross-Site Request Forgery, Improper Authentication, Cleartext Transmission of Sensitive Information, Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in the ...

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

US CERT

Titel

People's Republic of China-Linked Cyber Actors Hide in Router Firmware

Veröffentlicht

26. September 2023 21:45

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-270a

Text

Executive Summary The United States National Security Agency (NSA), the U.S. Federal Bureau of Investigation (FBI), the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Japan National Police Agency (NPA), and the Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) (hereafter referred to as the “authoring agencies”) ...

Hitachi Energy Asset Suite 9

Titel

Hitachi Energy Asset Suite 9

Veröffentlicht

26. September 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-02

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Asset Suite 9 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated user to enter an arbitrary password to execute equipment tag out actions. 3. TECHNICAL DETAILS ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-01

Suprema BioStar 2

Titel

Suprema BioStar 2

Veröffentlicht

26. September 2023 14:00

URL

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: Suprema Inc. Equipment: BioStar 2 Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a SQL injection to execute arbitrary commands. 3. TECHNICAL ...

Advantech EKI-1524-CE series

Titel

Advantech EKI-1524-CE series

Veröffentlicht

26. September 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Advantech Equipment: EKI-1524-CE, EKI-1522-CE, EKI-1521-CE Vulnerabilities: Cross-Site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code in the context of the session. 3. TECHNICAL DETAILS 3.1 ...

Rockwell Automation FactoryTalk View Machine Edition

Titel

Rockwell Automation FactoryTalk View Machine Edition

Veröffentlicht

21. September 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-06

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk View Machine Edition Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute code remotely with specially crafted malicious packets or by using a ...

Rockwell Automation Select Logix Communication Modules

Titel

Rockwell Automation Select Logix Communication Modules

Veröffentlicht

21. September 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-04

Text

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: 1756-EN2T, 1756-EN2TK, 1756-EN2TXT, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2F, 1756-EN2FK, 1756-EN3TR, 1756-EN3TRK Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code ...

Siemens Spectrum Power 7

Titel

Siemens Spectrum Power 7

Veröffentlicht

21. September 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-264-02

Text

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...