November 2022
29.11.2022
US CERT (ICS)
Omron PLC CJ and CS Series (Update A)
Titel
Omron PLC CJ and CS Series (Update A)
Veröffentlicht
29. November 2022 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-19-346-02
Text
This advisory includes information and mitigation recommendations for authentications vulnerabilities reported in the Omron PLC CJ and CS Series.
22.11.2022
US CERT (ICS)
AVEVA Edge
Titel
AVEVA Edge
Veröffentlicht
22. November 2022 16:35
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-01
Text
22.11.2022
US CERT (ICS)
Digital Alert Systems DASDEC
Titel
Digital Alert Systems DASDEC
Veröffentlicht
22. November 2022 16:30
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-02
Text
22.11.2022
US CERT (ICS)
Phoenix Contact Automation Worx
Titel
Phoenix Contact Automation Worx
Veröffentlicht
22. November 2022 16:25
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-03
Text
22.11.2022
US CERT (ICS)
GE CIMPLICITY
Titel
GE CIMPLICITY
Veröffentlicht
22. November 2022 16:20
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-04
Text
22.11.2022
US CERT (ICS)
Moxa Multiple ARM-Based Computers
Titel
Moxa Multiple ARM-Based Computers
Veröffentlicht
22. November 2022 16:15
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-05
Text
22.11.2022
US CERT (ICS)
Mitsubishi Electric FA Engineering Software Products (Update G)
Titel
Mitsubishi Electric FA Engineering Software Products (Update G)
Veröffentlicht
22. November 2022 16:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02
Text
22.11.2022
US CERT (ICS)
Mitsubishi Electric Factory Automation Engineering Products (Update I)
Titel
Mitsubishi Electric Factory Automation Engineering Products (Update I)
Veröffentlicht
22. November 2022 16:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-04
Text
22.11.2022
US CERT (ICS)
Hillrom Medical Device Management (Update C)
Titel
Hillrom Medical Device Management (Update C)
Veröffentlicht
22. November 2022 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsma-21-152-01
Text
This updated advisory is a follow-up to the original advisory titled ICSMA-21-152-01 Hillrom Medical Device Management (Update B) that was published September 8, 2022, to the ICS webpage at cisa.gov/ics. This advisory contains mitigations for Out-of-bounds Write, Out-of-bounds Read vulnerabilities in Welch Allyn medical device management tools.
17.11.2022
US CERT
AA22-321A: #StopRansomware: Hive Ransomware
Titel
AA22-321A: #StopRansomware: Hive Ransomware
Veröffentlicht
17. November 2022 18:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-321a
Text
Original release date: November 17, 2022SummaryActions to Take Today to Mitigate Cyber Threats from Ransomware: • Prioritize remediating known exploited vulnerabilities. • Enable and enforce multifactor authentication with strong passwords • Close unused ports and remove any application not deemed necessary for day-to-day operations. Note: This joint Cybersecurity Advisory (CSA) ...
17.11.2022
US CERT (ICS)
Red Lion Crimson
Titel
Red Lion Crimson
Veröffentlicht
17. November 2022 16:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-321-01
Text
17.11.2022
US CERT (ICS)
Cradlepoint IBR600
Titel
Cradlepoint IBR600
Veröffentlicht
17. November 2022 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-321-02
Text
16.11.2022
US CERT
AA22-320A: Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
Titel
AA22-320A: Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
Veröffentlicht
16. November 2022 16:04
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-320a
Text
Original release date: November 16, 2022SummaryFrom mid-June through mid-July 2022, CISA conducted an incident response engagement at a Federal Civilian Executive Branch (FCEB) organization where CISA observed suspected advanced persistent threat (APT) activity. In the course of incident response activities, CISA determined that cyber threat actors exploited the Log4Shell vulnerability ...
11.11.2022
US CERT (ICS)
Siemens SINEC Network Management System Logback Component
Titel
Siemens SINEC Network Management System Logback Component
Veröffentlicht
11. November 2022 05:25
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-03
Text
10.11.2022
US CERT (ICS)
Siemens Parasolid
Titel
Siemens Parasolid
Veröffentlicht
10. November 2022 17:35
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-01
Text
10.11.2022
US CERT (ICS)
Siemens Web Server Login Page of Industrial Controllers
Titel
Siemens Web Server Login Page of Industrial Controllers
Veröffentlicht
10. November 2022 17:30
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-02
Text
10.11.2022
US CERT (ICS)
Siemens SINUMERIK ONE and SINUMERIK MC
Titel
Siemens SINUMERIK ONE and SINUMERIK MC
Veröffentlicht
10. November 2022 17:20
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-04
Text
10.11.2022
US CERT (ICS)
Siemens QMS Automotive
Titel
Siemens QMS Automotive
Veröffentlicht
10. November 2022 17:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-06
Text
10.11.2022
US CERT (ICS)
Omron NJ/NX-series Machine Automation Controllers
Titel
Omron NJ/NX-series Machine Automation Controllers
Veröffentlicht
10. November 2022 17:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-07
Text
10.11.2022
US CERT (ICS)
Omron NJNX-series
Titel
Omron NJNX-series
Veröffentlicht
10. November 2022 17:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-08
Text
10.11.2022
US CERT (ICS)
Siemens Teamcenter Visualization and JT2Go
Titel
Siemens Teamcenter Visualization and JT2Go
Veröffentlicht
10. November 2022 16:55
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-09
Text
08.11.2022
SIEMENS CERT
SSA-371761 V1.0: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3
Titel
SSA-371761 V1.0: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3
Veröffentlicht
8. November 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
Text
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
08.11.2022
SIEMENS CERT
SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
Titel
SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
Veröffentlicht
8. November 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf
Text
The networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) use Initial Sequence Numbers for TCP-Sessions that are predictable. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.
08.11.2022
SIEMENS CERT
SSA-478960 V1.0: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers
Titel
SSA-478960 V1.0: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers
Veröffentlicht
8. November 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-478960.pdf
Text
The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for several affected products and recommends to update to the latest versions. ...
08.11.2022
SIEMENS CERT
SSA-506569 V1.0: Multiple Vulnerabilities in SCALANCE W1750D
Titel
SSA-506569 V1.0: Multiple Vulnerabilities in SCALANCE W1750D
Veröffentlicht
8. November 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf
Text
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to denial of service, unauthenticated remote code execution or stored XSS. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not ...

Letzte Updates

BOSCH PSIRT
21.08.2024
SIEMENS CERT
12.09.2024
US CERT
19.09.2024
US CERT (ICS)
19.09.2024

Nach Quelle

Archiv

2024
2023
2022
2021
2020
2019
2018
2017

Feeds