Bulletins | CERT@VDE

SSA-473245 V2.6 (Last Update: 2023-05-09): Denial of Service Vulnerability in Profinet Devices

Titel

SSA-473245 V2.6 (Last Update: 2023-05-09): Denial of Service Vulnerability in Profinet Devices

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-473245.html

Text

A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures ...

09.05.2023

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Titel

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Veröffentlicht

9. Mai 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-566905.html

Text

Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and ...

08.05.2023

US CERT

Hunting Russian Intelligence “Snake” Malware

Titel

Hunting Russian Intelligence “Snake” Malware

Veröffentlicht

8. Mai 2023 23:02

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a

Text

SUMMARY The Snake implant is considered the most sophisticated cyber espionage tool designed and used by Center 16 of Russia’s Federal Security Service (FSB) for long-term intelligence collection on sensitive targets. To conduct operations using this tool, the FSB created a covert peer-to-peer (P2P) network of numerous Snake-infected computers worldwide. ...

02.05.2023

Mitsubishi Electric Factory Automation Products

Titel

Mitsubishi Electric Factory Automation Products

Veröffentlicht

2. Mai 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-122-01

Text

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: Factory Automation (FA) Products Vulnerabilities: Dependency on Vulnerable Third-Party Component 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a malicious attacker to escalate privileges, disclose parameter information in the affected products, and cause a ...

April 2023

28.04.2023

BOSCH PSIRT

Use of Telnet in the interface module SLC-0-GPNT00300

Titel

Use of Telnet in the interface module SLC-0-GPNT00300

Veröffentlicht

28. April 2023 02:00

URL

https://psirt.bosch.com/security-advisories/bosch-sa-387640.html

Text

BOSCH-SA-387640: The SLC-0-GPNT00300 from Bosch Rexroth contains technology from SICK AG. The manufacturer has published a security bulletin \[1\] regarding the availability of a Telnet interface for debugging.The SLC-0-GPNT00300 provides a Telnet interface for debugging, which is enabled by factory default.\No password is set in the default configuration.\If the password ...

26.04.2023

BOSCH PSIRT

Insecure authentication in B420 legacy communication module

Titel

Insecure authentication in B420 legacy communication module

Veröffentlicht

26. April 2023 02:00

URL

https://psirt.bosch.com/security-advisories/bosch-sa-341298-bt.html

Text

BOSCH-SA-341298-BT: An authentication vulnerability was found in the B420 Ethernet communication module from Bosch Security Systems. This is a legacy product which is currently obsolete and was announced to reach End on Life (EoL) on 2013. The B420 was last sold in July 2013 and was replaced by the B426. ...

25.04.2023

Scada-LTS Third Party Component

Titel

Scada-LTS Third Party Component

Veröffentlicht

25. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-115-02

Text

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Scada-LTS Equipment: Scada-LTS Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow loss of sensitive information and execution of arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ...

25.04.2023

Keysight N8844A Data Analytics Web Service

Titel

Keysight N8844A Data Analytics Web Service

Veröffentlicht

25. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-115-01

Text

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Keysight Equipment: N8844A Data Analytics Web Service Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Keysight reports this vulnerability affects the ...

20.04.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-110-01

INEA ME RTU

Titel

INEA ME RTU

Veröffentlicht

20. April 2023 14:00

URL

Text

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: INEA Equipment: ME RTU Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ME RTU, a remote terminal unit, are ...

18.04.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-108-01

Omron CS/CJ Series

Titel

Omron CS/CJ Series

Veröffentlicht

18. April 2023 14:00

URL

Text

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: SYSMAC CS/CJ Series Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access sensitive information in the file system and memory. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

18.04.2023

Schneider Electric Easy UPS Online Monitoring Software

Titel

Schneider Electric Easy UPS Online Monitoring Software

Veröffentlicht

18. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-108-02

Text

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: APC Easy UPS Online Monitoring Software, Schneider Electric Easy UPS Online Monitoring Software Vulnerabilities: Missing Authentication for Critical Function, Improper Handling of Case Sensitivity 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in ...

17.04.2023

US CERT

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

Titel

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

Veröffentlicht

17. April 2023 22:32

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108

Text

APT28 accesses poorly maintained Cisco routers and deploys malware on unpatched devices using CVE-2017-6742. Overview and Context The UK National Cyber Security Centre (NCSC), the US National Security Agency (NSA), US Cybersecurity and Infrastructure Security Agency (CISA) and US Federal Bureau of Investigation (FBI) are releasing this joint advisory to ...

Siemens JT Open and JT Utilities

Titel

Siemens JT Open and JT Utilities

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-02

Text

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). 1. EXECUTIVE SUMMARY CVSS v3 ...

Siemens SCALANCE X-200, X-200IRT, and X-300 Switch Families BadAlloc Vulnerabilities

Titel

Siemens SCALANCE X-200, X-200IRT, and X-300 Switch Families BadAlloc Vulnerabilities

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-13

Text

Siemens CPCI85 Firmware of SICAM A8000 Devices

Titel

Siemens CPCI85 Firmware of SICAM A8000 Devices

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-07

Text

Siemens Adaptec maxView Application

Titel

Siemens Adaptec maxView Application

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-01

Text

Mitsubishi Electric India GC-ENET-COM

Titel

Mitsubishi Electric India GC-ENET-COM

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15

Text

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric India Equipment: GC-ENET-COM Vulnerability: Signal Handler Race Condition 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to a communication error and may result in a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The ...

Siemens SCALANCE XCM332

Titel

Siemens SCALANCE XCM332

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-09

Text

Siemens Path Traversal TIA Portal

Titel

Siemens Path Traversal TIA Portal

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-04

Text

FANUC ROBOGUIDE-HandlingPRO

Titel

FANUC ROBOGUIDE-HandlingPRO

Veröffentlicht

11. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-101-01

Text

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: FANUC Equipment: ROBOGUIDE-HandlingPRO Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read and/or overwrite files on the system running the affected software. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ...

SSA-382653 V1.2 (Last Update: 2023-04-11): Multiple Denial of Service Vulnerabilities in Industrial Products

Titel

SSA-382653 V1.2 (Last Update: 2023-04-11): Multiple Denial of Service Vulnerabilities in Industrial Products

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-382653.html

Text

Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial-of-service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, ...

SSA-408105 V1.1 (Last Update: 2023-04-11): Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Products

Titel

SSA-408105 V1.1 (Last Update: 2023-04-11): Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Products

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-408105.html

Text

The openSSL component, versions 3.0.0 through 3.0.6, contains two buffer overflow vulnerabilities (CVE-2022-3602, CVE-2022-3786) in the X.509 certificate verification [0]. They could allow an attacker to create a denial of service condition or execute arbitrary code on a vulnerable TLS server (if the server requests client certificate authentication), or on ...

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Titel

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Text

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-699404 V1.0: Observable Response Discrepancy in Mendix Forgot Password Module

Titel

SSA-699404 V1.0: Observable Response Discrepancy in Mendix Forgot Password Module

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-699404.html

Text

The Mendix Forgot Password module contains an observable response discrepancy issue that could allow an attacker to retrieve sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.