Bulletins | CERT@VDE

SSA-640732 V1.0: Authentication Bypass Vulnerability in Siveillance Video Mobile Server

Titel

SSA-640732 V1.0: Authentication Bypass Vulnerability in Siveillance Video Mobile Server

Veröffentlicht

21. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-640732.pdf

Text

The mobile server component of Siveillance Video 2022 R2 contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to access the application without a valid account. Siemens has released a hotfix for Siveillance Video 2022 R2 and recommends to apply the hotfix on all installations of the ...

20.10.2022

Bentley Systems MicroStation Connect

Titel

Bentley Systems MicroStation Connect

Veröffentlicht

20. Oktober 2022 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-293-01

Text

20.10.2022

B. Braun Infusomat Space Large Volume Pump (Update A)

Titel

B. Braun Infusomat Space Large Volume Pump (Update A)

Veröffentlicht

20. Oktober 2022 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-294-01

Text

This advisory contains mitigation for Unrestricted Upload of File with Dangerous Type, Cleartext Transmission of Sensitive Information, Missing Authentication for Critical Function, Insufficient Verification of Data Authenticity, and Improper Input Validation vulnerabilities in the B. Braun Infusomat Space Large Volume Pump.

19.10.2022

BOSCH PSIRT

Multiple Cross Site Scripting vulnerabilities in Bosch VIDEOJET multi 4000

Titel

Multiple Cross Site Scripting vulnerabilities in Bosch VIDEOJET multi 4000

Veröffentlicht

19. Oktober 2022 02:00

URL

https://psirt.bosch.com/security-advisories/bosch-sa-454166-bt.html

Text

BOSCH-SA-454166-BT: The possibility for a reflected Cross Site Scripting (XSS) and stored Cross Site Scripting (XSS) attack was discovered in the Bosch VIDEOJET multi 4000.For more details please see the description of the vulnerability in this advisory.Bosch rates this vulnerability with CVSSv3.1 base score 5.8 (medium) and 5.1 (medium), where ...

19.10.2022

BOSCH PSIRT

CVE-2021-3772 Linux Kernel Vulnerability in NetApp DSA E2800 series

Titel

CVE-2021-3772 Linux Kernel Vulnerability in NetApp DSA E2800 series

Veröffentlicht

19. Oktober 2022 02:00

URL

https://psirt.bosch.com/security-advisories/bosch-sa-609377-bt.html

Text

BOSCH-SA-609377-BT: The Bosch DSA E2800 products are based on NetApp technology, which incorporate a Linux Kernel. Linux Kernel versions prior to 5.15.0 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or Denial of Service (DoS). Successful exploitation of this vulnerability could ...

Siemens Industrial Edge Management

Titel

Siemens Industrial Edge Management

Veröffentlicht

13. Oktober 2022 16:46

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-02

Text

Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service

Titel

Hitachi Energy Lumada Asset Performance Management Prognostic Model Executor Service

Veröffentlicht

13. Oktober 2022 16:40

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-05

Text

This advisory contains mitigations for Allocation of Resources Without Limits or Throttling and Code Injection vulnerabilities in versions of Hitachi Energy Lumada Asset Performance Manager (APM) software.

Siemens Desigo PXM Devices

Titel

Siemens Desigo PXM Devices

Veröffentlicht

13. Oktober 2022 16:38

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-06

Text

Siemens Nucleus RTOS FTP Server

Titel

Siemens Nucleus RTOS FTP Server

Veröffentlicht

13. Oktober 2022 16:36

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-07

Text

Siemens TCP Event Service of SCALANCE And RUGGEDCOM Devices

Titel

Siemens TCP Event Service of SCALANCE And RUGGEDCOM Devices

Veröffentlicht

13. Oktober 2022 16:34

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-08

Text

Siemens SICAM P850 and P855 Devices

Titel

Siemens SICAM P850 and P855 Devices

Veröffentlicht

13. Oktober 2022 16:32

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-286-09

Text

Altair HyperView Player

Titel

Altair HyperView Player

Veröffentlicht

11. Oktober 2022 16:20

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-284-01

Text

Daikin Holdings Singapore Pte Ltd. SVMPC1 and SVMPC2

Titel

Daikin Holdings Singapore Pte Ltd. SVMPC1 and SVMPC2

Veröffentlicht

11. Oktober 2022 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-284-02

Text

SSA-685781 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products

Titel

SSA-685781 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf

Text

Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or ...

SSA-928782 V1.0: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices

Titel

SSA-928782 V1.0: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-928782.pdf

Text

LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.

SSA-572005 V1.0: Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices

Titel

SSA-572005 V1.0: Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-572005.pdf

Text

Session fixation and incorrect parameter parsing vulnerabilities were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-313313 V1.0: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS

Titel

SSA-313313 V1.0: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-313313.pdf

Text

The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable ...