März 2023
16.03.2023
US CERT (ICS)
Rockwell Automation Modbus TCP AOI Server
Titel
Rockwell Automation Modbus TCP AOI Server
Veröffentlicht
16. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-07
Text
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Modbus TCP Server Add-On Instruction (AOI) Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized user to read the connected device’s Modbus TCP ...
16.03.2023
US CERT (ICS)
Siemens RUGGEDCOM CROSSBOW V5.2
Titel
Siemens RUGGEDCOM CROSSBOW V5.2
Veröffentlicht
16. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-03
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). 1. EXECUTIVE SUMMARY CVSS v3 ...
16.03.2023
US CERT (ICS)
Siemens SCALANCE, RUGGEDCOM Third-Party
Titel
Siemens SCALANCE, RUGGEDCOM Third-Party
Veröffentlicht
16. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-01
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). 1. EXECUTIVE SUMMARY CVSS v3 ...
16.03.2023
US CERT (ICS)
Siemens RUGGEDCOM CROSSBOW V5.3
Titel
Siemens RUGGEDCOM CROSSBOW V5.3
Veröffentlicht
16. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-02
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). 1. EXECUTIVE SUMMARY CVSS v3 ...
16.03.2023
US CERT (ICS)
Honeywell OneWireless Wireless Device Manager
Titel
Honeywell OneWireless Wireless Device Manager
Veröffentlicht
16. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-075-06
Text
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Honeywell Equipment: OneWireless Wireless Device Manager (WDM) Vulnerabilities: Command Injection, Use of Insufficiently Random Values, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of these vulnerabilities could disclose sensitive information, allow privilege escalation, or allow remote ...
15.03.2023
US CERT
#StopRansomware: LockBit 3.0
Titel
#StopRansomware: LockBit 3.0
Veröffentlicht
15. März 2023 20:20
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-075a
Text
SUMMARY Note: this joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect ...
14.03.2023
US CERT (ICS)
AVEVA Plant SCADA and AVEVA Telemetry Server
Titel
AVEVA Plant SCADA and AVEVA Telemetry Server
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04
Text
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Equipment: AVEVA Plant SCADA and AVEVA Telemetry Server Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated user to read data, cause a denial of service, and tamper with alarm states. ...
14.03.2023
US CERT (ICS)
Autodesk FBX SDK
Titel
<a href="/news-events/ics-advisories/icsa-23-073-02" hreflang="en">Autodesk FBX SDK</a>
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-02
Text
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Autodesk Equipment: FBX SDK Vulnerability: Out-of-bounds Read, Use After Free, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to code execution or a denial-of-service condition. Products using Autodesk FBX SDK software are affected by ...
14.03.2023
US CERT (ICS)
Omron CJ1M PLC
Titel
<a href="/news-events/ics-advisories/icsa-23-073-01" hreflang="en">Omron CJ1M PLC</a>
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
Text
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: CJ1M PLC Vulnerabilities: Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass user memory protections by writing to a specific memory address. An attacker can also overwrite passwords ...
14.03.2023
US CERT (ICS)
GE iFIX
Titel
<a href="/news-events/ics-advisories/icsa-23-073-03" hreflang="en">GE iFIX</a>
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-03
Text
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: GE Digital Equipment: iFIX Vulnerability: Code Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for privilege escalation and full control of the system. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following components of iFIX, a human ...
14.03.2023
US CERT (ICS)
AVEVA Plant SCADA and AVEVA Telemetry Server
Titel
<a href="/news-events/ics-advisories/icsa-23-073-04" hreflang="en">AVEVA Plant SCADA and AVEVA Telemetry Server</a>
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-04
Text
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: AVEVA Equipment: AVEVA Plant SCADA and AVEVA Telemetry Server Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated user to read data, cause a denial of service, and tamper with alarm states. ...
14.03.2023
US CERT (ICS)
Omron CJ1M PLC
Titel
Omron CJ1M PLC
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
Text
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: CJ1M PLC Vulnerabilities: Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass user memory protections by writing to a specific memory address. An attacker can also overwrite passwords ...
14.03.2023
US CERT (ICS)
Autodesk FBX SDK
Titel
Autodesk FBX SDK
Veröffentlicht
14. März 2023 13:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-02
Text
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Autodesk Equipment: FBX SDK Vulnerability: Out-of-bounds Read, Use After Free, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to code execution or a denial-of-service condition. Products using Autodesk FBX SDK software are affected by ...
14.03.2023
SIEMENS CERT
SSA-223771 V1.2 (Last Update: 2023-03-14): SISCO Stack Vulnerability in SIPROTEC 5 Devices
Titel
SSA-223771 V1.2 (Last Update: 2023-03-14): SISCO Stack Vulnerability in SIPROTEC 5 Devices
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-223771.html
Text
A vulnerability in the third party component SISCO MMS-EASE could allow attackers to cause a denial of service condition with SIPROTEC 5 devices. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products ...
14.03.2023
SIEMENS CERT
SSA-203374 V1.0: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices
Titel
SSA-203374 V1.0: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-203374.html
Text
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.
14.03.2023
SIEMENS CERT
SSA-244969 V1.9 (Last Update: 2023-03-14): OpenSSL Vulnerability in Industrial Products
Titel
SSA-244969 V1.9 (Last Update: 2023-03-14): OpenSSL Vulnerability in Industrial Products
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-244969.html
Text
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content. Siemens has released updates for several affected products and recommends to update to ...
14.03.2023
SIEMENS CERT
SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products
Titel
SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-324955.html
Text
A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://www.saddns.net/. Siemens has released updates for the affected products and ...
14.03.2023
SIEMENS CERT
SSA-321292 V1.4 (Last Update: 2023-03-14): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...
Titel
SSA-321292 V1.4 (Last Update: 2023-03-14): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-321292.html
Text
A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...
14.03.2023
SIEMENS CERT
SSA-320629 V1.0: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3
Titel
SSA-320629 V1.0: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-320629.html
Text
RUGGEDCOM CROSSBOW before V5.3 contains two vulnerabilities that could allow authenticated remote attackers to access data they are not authorized for, or execute arbitrary database queries via an SQL injection attack. Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
14.03.2023
SIEMENS CERT
SSA-413565 V1.1 (Last Update: 2023-03-14): Multiple Vulnerabilities in SCALANCE Products
Titel
SSA-413565 V1.1 (Last Update: 2023-03-14): Multiple Vulnerabilities in SCALANCE Products
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-413565.html
Text
Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for several affected products and recommends to update to the latest ...
14.03.2023
SIEMENS CERT
SSA-476715 V1.1 (Last Update: 2023-03-14): Two Vulnerabilities in Automation License Manager
Titel
SSA-476715 V1.1 (Last Update: 2023-03-14): Two Vulnerabilities in Automation License Manager
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-476715.html
Text
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation and remote code execution. The affected functionality is not available for remote attackers in the ...
14.03.2023
SIEMENS CERT
SSB-439005 V5.1 (Last Update: 2023-03-14): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...
Titel
SSB-439005 V5.1 (Last Update: 2023-03-14): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssb-439005.html
Text
14.03.2023
SIEMENS CERT
SSA-260625 V1.0: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2
Titel
SSA-260625 V1.0: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-260625.html
Text
RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that could allow authenticated remote attackers to perform unauthorized actions (CVE-2023-27309) or escalate privileges (CVE-2023-27310). Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
14.03.2023
SIEMENS CERT
SSA-419740 V1.0: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
Titel
SSA-419740 V1.0: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-419740.html
Text
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and ...
14.03.2023
SIEMENS CERT
SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge
Titel
SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge
Veröffentlicht
14. März 2023 01:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-491245.html
Text
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP, SLDPRT and PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker ...

Letzte Updates

BOSCH PSIRT
25.04.2025
SIEMENS CERT
23.05.2025
US CERT
20.05.2025
US CERT (ICS)
05.06.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds