Bulletins | CERT@VDE

https://www.cisa.gov/news-events/ics-advisories/icsa-23-108-01

Omron CS/CJ Series

Titel

Omron CS/CJ Series

Veröffentlicht

18. April 2023 14:00

URL

Text

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: SYSMAC CS/CJ Series Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access sensitive information in the file system and memory. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

18.04.2023

Schneider Electric Easy UPS Online Monitoring Software

Titel

Schneider Electric Easy UPS Online Monitoring Software

Veröffentlicht

18. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-108-02

Text

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: APC Easy UPS Online Monitoring Software, Schneider Electric Easy UPS Online Monitoring Software Vulnerabilities: Missing Authentication for Critical Function, Improper Handling of Case Sensitivity 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in ...

17.04.2023

US CERT

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

Titel

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

Veröffentlicht

17. April 2023 22:32

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108

Text

APT28 accesses poorly maintained Cisco routers and deploys malware on unpatched devices using CVE-2017-6742. Overview and Context The UK National Cyber Security Centre (NCSC), the US National Security Agency (NSA), US Cybersecurity and Infrastructure Security Agency (CISA) and US Federal Bureau of Investigation (FBI) are releasing this joint advisory to ...

Mitsubishi Electric India GC-ENET-COM

Titel

Mitsubishi Electric India GC-ENET-COM

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-15

Text

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric India Equipment: GC-ENET-COM Vulnerability: Signal Handler Race Condition 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to a communication error and may result in a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The ...

Siemens SCALANCE XCM332

Titel

Siemens SCALANCE XCM332

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-09

Text

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). 1. EXECUTIVE SUMMARY CVSS v3 ...

Siemens JT Open and JT Utilities

Titel

Siemens JT Open and JT Utilities

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-02

Text

Siemens Adaptec maxView Application

Titel

Siemens Adaptec maxView Application

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-01

Text

Siemens Path Traversal TIA Portal

Titel

Siemens Path Traversal TIA Portal

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-04

Text

Siemens CPCI85 Firmware of SICAM A8000 Devices

Titel

Siemens CPCI85 Firmware of SICAM A8000 Devices

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-07

Text

Siemens SCALANCE X-200, X-200IRT, and X-300 Switch Families BadAlloc Vulnerabilities

Titel

Siemens SCALANCE X-200, X-200IRT, and X-300 Switch Families BadAlloc Vulnerabilities

Veröffentlicht

13. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-13

Text

FANUC ROBOGUIDE-HandlingPRO

Titel

FANUC ROBOGUIDE-HandlingPRO

Veröffentlicht

11. April 2023 14:00

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-101-01

Text

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: FANUC Equipment: ROBOGUIDE-HandlingPRO Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read and/or overwrite files on the system running the affected software. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ...

SSA-691715 V1.0: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products

Titel

SSA-691715 V1.0: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-691715.html

Text

A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released an update for SIMATIC WinCC and recommends to update to the latest version. Siemens is preparing further updates and recommends specific ...

SSA-642810 V1.0: JT File Parsing Vulnerability in JT Open and JT Utilities

Titel

SSA-642810 V1.0: JT File Parsing Vulnerability in JT Open and JT Utilities

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-642810.html

Text

JT Open Toolkit and JT Utilities are affected by a memory corruption vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or potentially lead to arbitrary ...

SSA-310038 V1.1 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE X Switch Devices

Titel

SSA-310038 V1.1 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE X Switch Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-310038.html

Text

Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates ...

SSA-270778 V1.8 (Last Update: 2023-04-11): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC S...

Titel

SSA-270778 V1.8 (Last Update: 2023-04-11): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-270778.html

Text

A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain circumstances (versions prior to SIMATIC WinCC V7.3 or SIMATIC PCS 7 V8.1 are ...

SSA-256353 V1.4 (Last Update: 2023-04-11): Third-Party Component Vulnerabilities in RUGGEDCOM ROS

Titel

SSA-256353 V1.4 (Last Update: 2023-04-11): Third-Party Component Vulnerabilities in RUGGEDCOM ROS

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-256353.html

Text

Multiple vulnerabilities affect various third-party components of the RUGGEDCOM Operating System (ROS). If exploited, an attacker could cause a denial-of-service, act as a man-in-the-middle or retrieval of sensitive information or gain privileged functions. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-102233 V2.1 (Last Update: 2023-04-11): SegmentSmack in VxWorks-based Industrial Devices

Titel

SSA-102233 V2.1 (Last Update: 2023-04-11): SegmentSmack in VxWorks-based Industrial Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-102233.html

Text

The products listed below contain a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released updates for ...

SSA-700053 V1.2 (Last Update: 2023-04-11): Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Titel

SSA-700053 V1.2 (Last Update: 2023-04-11): Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-700053.html

Text

Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads a malicious file in CGM or RAS format. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or ...

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Titel

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Text

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-322980 V1.0: Denial of Service Vulnerability in SIPROTEC 5 Devices

Titel

SSA-322980 V1.0: Denial of Service Vulnerability in SIPROTEC 5 Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-322980.html

Text

SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-321292 V1.5 (Last Update: 2023-04-11): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...

Titel

SSA-321292 V1.5 (Last Update: 2023-04-11): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-321292.html

Text

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...

SSA-478960 V1.3 (Last Update: 2023-04-11): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Titel

SSA-478960 V1.3 (Last Update: 2023-04-11): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-478960.html

Text

The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for several affected products and recommends to update to the latest versions. ...

SSA-472454 V1.0: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices

Titel

SSA-472454 V1.0: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-472454.html

Text

The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by unauthenticated command injection vulnerability. This could allow an attacker to perfom remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-462066 V3.1 (Last Update: 2023-04-11): Vulnerability known as TCP SACK PANIC in Industrial Products

Titel

SSA-462066 V3.1 (Last Update: 2023-04-11): Vulnerability known as TCP SACK PANIC in Industrial Products

Veröffentlicht

11. April 2023 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-462066.html

Text

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures ...