Bulletins | CERT@VDE

SSA-462066 V3.0 (Last Update: 2022-06-14): Vulnerability known as TCP SACK PANIC in Industrial Products

Titel

SSA-462066 V3.0 (Last Update: 2022-06-14): Vulnerability known as TCP SACK PANIC in Industrial Products

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Text

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. Siemens has released updates for several affected products and recommends to update to the new versions. Siemens is preparing further ...

SSA-740594 V1.0: Privilege Escalation Vulnerability in Mendix SAML Module

Titel

SSA-740594 V1.0: Privilege Escalation Vulnerability in Mendix SAML Module

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-740594.pdf

Text

The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) attack allowing to execute malicious code by tricking users into ...

SSA-772220 V2.0 (Last Update: 2022-06-14): OpenSSL Vulnerabilities in Industrial Products

Titel

SSA-772220 V2.0 (Last Update: 2022-06-14): OpenSSL Vulnerabilities in Industrial Products

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf

Text

OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent . Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-363107 V1.1 (Last Update: 2022-06-14): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Titel

SSA-363107 V1.1 (Last Update: 2022-06-14): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-363107.pdf

Text

A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-626968 V1.1 (Last Update: 2022-06-14): Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices

Titel

SSA-626968 V1.1 (Last Update: 2022-06-14): Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

Text

Desigo PXC3, PXC4, PXC5 and DXR2 devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial of service condition, or perform remote code execution. Siemens has released updates for the affected products and recommends to update ...

SSA-593272 V1.7 (Last Update: 2022-06-14): SegmentSmack in Interniche IP-Stack based Industrial Devices

Titel

SSA-593272 V1.7 (Last Update: 2022-06-14): SegmentSmack in Interniche IP-Stack based Industrial Devices

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-593272.pdf

Text

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released updates for several ...

SSA-535997 V1.1 (Last Update: 2022-06-14): Cleartext Storage of Sensitive Information in Multiple SIMATIC Products

Titel

SSA-535997 V1.1 (Last Update: 2022-06-14): Cleartext Storage of Sensitive Information in Multiple SIMATIC Products

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-535997.pdf

Text

A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-443566 V1.2 (Last Update: 2022-06-14): Authentication Bypass in SCALANCE X Switches Families

Titel

SSA-443566 V1.2 (Last Update: 2022-06-14): Authentication Bypass in SCALANCE X Switches Families

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-443566.pdf

Text

Several SCALANCE X switches are affected by an Authentication Bypass vulnerability. The vulnerability allows an unauthenticated attacker to violate access-control rules. The vulnerability can be exploited by sending a GET request to a specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be ...

SSB-439005 V4.4 (Last Update: 2022-06-14): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Titel

SSB-439005 V4.4 (Last Update: 2022-06-14): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf

Text

SSA-401167 V1.0: Cross-site scripting Vulnerability in Teamcenter Active Workspace

Titel

SSA-401167 V1.0: Cross-site scripting Vulnerability in Teamcenter Active Workspace

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-401167.pdf

Text

Teamcenter Active Workspace is affected by a cross site scripting vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Titel

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-693555.pdf

Text

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-414513 V1.1 (Last Update: 2022-06-14): Information Disclosure Vulnerability in Mendix

Titel

SSA-414513 V1.1 (Last Update: 2022-06-14): Information Disclosure Vulnerability in Mendix

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf

Text

An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for several Mendix Applications and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not yet ...

SSA-789162 V1.1 (Last Update: 2022-06-14): Vulnerabilities in Teamcenter

Titel

SSA-789162 V1.1 (Last Update: 2022-06-14): Vulnerabilities in Teamcenter

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf

Text

Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures ...

SSA-446448 V1.1 (Last Update: 2022-06-14): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Titel

SSA-446448 V1.1 (Last Update: 2022-06-14): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-446448.pdf

Text

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further ...

SSA-388239 V1.0: Default Password Leakage affecting the Component Shared HIS used in Spectrum Power Systems

Titel

SSA-388239 V1.0: Default Password Leakage affecting the Component Shared HIS used in Spectrum Power Systems

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-388239.pdf

Text

Siemens has been made aware of a default password leakage in the internet affecting the component Shared HIS (SHHIS) used in Spectrum Power systems. The products listed below are affected by this default password leakage. This could allow an attacker to access the component Shared HIS of those products with ...

SSA-780073 V2.2 (Last Update: 2022-06-14): Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets

Titel

SSA-780073 V2.2 (Last Update: 2022-06-14): Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf

Text

Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior V06.00 are potentially affected by a denial of service vulnerability when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. Siemens has released updates for several affected products and recommends to update to the new versions. Siemens ...

08.06.2022

US CERT

AA22-158A: People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices

Titel

AA22-158A: People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices

Veröffentlicht

8. Juni 2022 00:00

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-158a

Text

Original release date: June 7, 2022SummaryBest Practices • Apply patches as soon as possible • Disable unnecessary ports and protocols • Replace end-of-life infrastructure • Implement a centralized patch management system This joint Cybersecurity Advisory describes the ways in which People’s Republic of China (PRC) state-sponsored cyber actors continue to ...

07.06.2022

Mitsubishi Electric MELSEC and MELIPC Series (Update C)

Titel

Mitsubishi Electric MELSEC and MELIPC Series (Update C)

Veröffentlicht

7. Juni 2022 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02

Text

This updated advisory is a follow up to the advisory update titled ICSA-21-334-02 Mitsubishi Electric MELSEC and MELIPC Series (Update B) that was published April 26, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Uncontrolled Resource Consumption, Improper Handling of Length Parameter Inconsistency, and Improper Input ...

03.06.2022

Vulnerabilities Affecting Dominion Voting Systems ImageCast X

Titel

Vulnerabilities Affecting Dominion Voting Systems ImageCast X

Veröffentlicht

3. Juni 2022 21:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-154-01

Text

This advisory contains mitigations for Improper Verification of Cryptographic Signature, Mutable Attestation of Measurement Reporting Data, Hidden Functionality, Improper Protection of Alternate Path, Path Traversal: ''../filedir', Execution with Unnecessary Privileges, Authentication Bypass Spoofing, Incorrect Privilege Assignment, and Origin Validation Error vulnerabilities in versions of Dominion Voting Systems Democracy Suite ImageCast ...

02.06.2022

Carrier LenelS2 HID Mercury access panels

Titel

Carrier LenelS2 HID Mercury access panels

Veröffentlicht

2. Juni 2022 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-153-01

Text

This advisory contains mitigations for Protection Mechanism Failure, Forced Browsing, Classic Buffer Overflow, Path Traversal, and OS Command Injection vulnerabilities in Carrier HID Mercury access panels sold by LenlS2.

02.06.2022

Illumina Local Run Manager

Titel

Illumina Local Run Manager

Veröffentlicht

2. Juni 2022 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-153-02

Text

This advisory contains mitigations for Path Traversal, Unrestricted Upload of File with Dangerous Type, Improper Access Control, and Cleartext Transmission of Sensitive Information vulnerabilities in Illumina devices using Local Run Manager software.

01.06.2022

US CERT

AA22-152A: Karakurt Data Extortion Group

Titel

AA22-152A: Karakurt Data Extortion Group

Veröffentlicht

1. Juni 2022 16:00

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-152a

Text

Original release date: June 1, 2022SummaryActions to take today to mitigate cyber threats from ransomware: • Prioritize patching known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enforce multifactor authentication. The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the Department of ...

Mai 2022

31.05.2022

https://us-cert.cisa.gov/ics/advisories/icsma-22-151-02

BD Synapsys

Titel

BD Synapsys

Veröffentlicht

31. Mai 2022 16:25

URL

Text

This advisory contains mitigations for an Insufficient Session Expiration vulnerability in the BD Synapsys microbiology informatics software platform.

31.05.2022

Mitsubishi Electric MELSEC iQ-F Series (Update A)

Titel

Mitsubishi Electric MELSEC iQ-F Series (Update A)

Veröffentlicht

31. Mai 2022 16:15

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-139-01

Text

This updated advisory is a follow-up to the original advisory titled ICSA-22-139-01 Mitsubishi Electric MELSEC iQ-F Series that was published May 19, 2022, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for Improper Input Validation vulnerabilities in Mitsubishi Electric MELSEC iQ-F Series CPU modules.

31.05.2022