Bulletins | CERT@VDE

SSA-371761 V1.0: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3

Titel

SSA-371761 V1.0: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf

Text

SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update for SINEC NMS and recommends to update to the latest version.

SSA-459643 V1.1 (Last Update: 2022-11-08): Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

Titel

SSA-459643 V1.1 (Last Update: 2022-11-08): Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-459643.pdf

Text

RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends. Siemens ...

SSA-506569 V1.0: Multiple Vulnerabilities in SCALANCE W1750D

Titel

SSA-506569 V1.0: Multiple Vulnerabilities in SCALANCE W1750D

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-506569.pdf

Text

The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to denial of service, unauthenticated remote code execution or stored XSS. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not ...

SSA-552702 V1.1 (Last Update: 2022-11-08): Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Pr...

Titel

SSA-552702 V1.1 (Last Update: 2022-11-08): Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-552702.pdf

Text

The products listed below do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific ...

SSA-568428 V1.0: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC

Titel

SSA-568428 V1.0: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-568428.pdf

Text

SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens is preparing updates and recommends specific countermeasures for products where updates are ...

SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS

Titel

SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf

Text

The networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) use Initial Sequence Numbers for TCP-Sessions that are predictable. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.

SSA-501891 V1.1 (Last Update: 2022-11-08): Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families

Titel

SSA-501891 V1.1 (Last Update: 2022-11-08): Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-501891.pdf

Text

There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-478960 V1.0: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Titel

SSA-478960 V1.0: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-478960.pdf

Text

The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for several affected products and recommends to update to the latest versions. ...

SSA-120378 V1.0: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Titel

SSA-120378 V1.0: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf

Text

Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF file with the affected products, this could lead the application to ...

SSA-570294 V1.0: Multiple Vulnerabilities in SICAM Q100 Before V2.50

Titel

SSA-570294 V1.0: Multiple Vulnerabilities in SICAM Q100 Before V2.50

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-570294.pdf

Text

SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-638652 V1.1 (Last Update: 2022-11-08): Authentication Bypass Vulnerability in Mendix SAML Module

Titel

SSA-638652 V1.1 (Last Update: 2022-11-08): Authentication Bypass Vulnerability in Mendix SAML Module

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf

Text

The Mendix SAML module insufficiently protects from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. Note: For compatibility reasons, fix versions are ...

SSA-787941 V1.0: Denial of Service Vulnerability in RUGGEDCOM ROS V4

Titel

SSA-787941 V1.0: Denial of Service Vulnerability in RUGGEDCOM ROS V4

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-787941.pdf

Text

RUGGEDCOM ROS-based V4 devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP connections. The web server recovers by itself once the attack ends. ...

SSA-853037 V1.0: File Parsing Vulnerabilities in Parasolid

Titel

SSA-853037 V1.0: File Parsing Vulnerabilities in Parasolid

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-853037.pdf

Text

Parasolid is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of ...

SSA-620288 V1.1 (Last Update: 2022-11-08): Multiple Vulnerabilities (NUCLEUS:13) in CAPITAL VSTAR

Titel

SSA-620288 V1.1 (Last Update: 2022-11-08): Multiple Vulnerabilities (NUCLEUS:13) in CAPITAL VSTAR

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf

Text

Multiple vulnerabilities (also known as “NUCLEUS:13”) have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. CAPITAL VSTAR uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities. Siemens recommends specific countermeasures for products where updates ...

SSA-587547 V1.0: Unencrypted Storage of User Credentials in QMS Automotive

Titel

SSA-587547 V1.0: Unencrypted Storage of User Credentials in QMS Automotive

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-587547.pdf

Text

QMS Automotive contains a vulnerability that stores user credentials in plantext within the user database. This could allow an attacker to read credentials from memory. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-764417 V1.5 (Last Update: 2022-11-08): Weak Encryption Vulnerability in RUGGEDCOM ROS Devices

Titel

SSA-764417 V1.5 (Last Update: 2022-11-08): Weak Encryption Vulnerability in RUGGEDCOM ROS Devices

Veröffentlicht

8. November 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf

Text

The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens is preparing updates and recommends specific countermeasures ...

03.11.2022

ETIC Telecom Remote Access Server (RAS)

Titel

ETIC Telecom Remote Access Server (RAS)

Veröffentlicht

3. November 2022 15:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-307-01

Text

03.11.2022

Nokia ASIK AirScale System Module

Titel

Nokia ASIK AirScale System Module

Veröffentlicht

3. November 2022 15:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-307-02

Text

01.11.2022

Mitsubishi Electric Multiple Factory Automation Products (Update C)

Titel

Mitsubishi Electric Multiple Factory Automation Products (Update C)

Veröffentlicht

1. November 2022 15:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-221-01

Text

This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric Multiple Factory Automation Products (Update B) that was published August 18, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Mitsubishi Electric GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, ...

Oktober 2022

27.10.2022