Februar 2022
23.02.2022
US CERT
AA22-054A: New Sandworm Malware Cyclops Blink Replaces VPNFilter
Titel
AA22-054A: New Sandworm Malware Cyclops Blink Replaces VPNFilter
Veröffentlicht
23. Februar 2022 16:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-054a
Text
Original release date: February 23, 2022SummaryThe Sandworm actor, which the United Kingdom and the United States have previously attributed to the Russian GRU, has replaced the exposed VPNFilter malware with a new more advanced framework. The United Kingdom's (UK) National Cyber Security Centre (NCSC), the Cybersecurity and Infrastructure Security Agency ...
22.02.2022
US CERT (ICS)
GE Proficy CIMPLICITY-IPM
Titel
GE Proficy CIMPLICITY-IPM
Veröffentlicht
22. Februar 2022 16:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-053-01
Text
This advisory contains mitigations for an Improper Privilege Management vulnerability in GE Proficy CIMPLICITY, a HMI and SCADA platform.
22.02.2022
US CERT (ICS)
GE Proficy CIMPLICITY-Cleartext
Titel
GE Proficy CIMPLICITY-Cleartext
Veröffentlicht
22. Februar 2022 16:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-053-02
Text
This advisory contains mitigations for a Cleartext Transmission of Sensitive Information vulnerability in GE Proficy CIMPLICITY, a HMI and SCADA platform.
22.02.2022
US CERT (ICS)
WIN-911 2021
Titel
WIN-911 2021
Veröffentlicht
22. Februar 2022 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-053-03
Text
This advisory contains mitigations for Incorrect Default Permissions vulnerabilities in WIN-911 2021 alarm notification platforms.
22.02.2022
SIEMENS CERT
SSA-306654 V1.0: Insyde BIOS Vulnerabilities in Siemens Industrial Products
Titel
SSA-306654 V1.0: Insyde BIOS Vulnerabilities in Siemens Industrial Products
Veröffentlicht
22. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
Text
Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.
17.02.2022
SIEMENS CERT
SSA-772220 V1.7 (Last Update: 2022-02-17): OpenSSL Vulnerabilities in Industrial Products
Titel
SSA-772220 V1.7 (Last Update: 2022-02-17): OpenSSL Vulnerabilities in Industrial Products
Veröffentlicht
17. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf
Text
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released updates for several affected products and recommends to update to the latest versions. ...
17.02.2022
SIEMENS CERT
SSA-455843 V1.7 (Last Update: 2022-02-17): WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products
Titel
SSA-455843 V1.7 (Last Update: 2022-02-17): WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products
Veröffentlicht
17. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-455843.pdf
Text
CISA and WIBU Systems disclosed six vulnerabilities in different versions of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerabilities are described in the section “Vulnerability Classification” below and got assigned the CVE IDs CVE-2020-14509, CVE-2020-14513, CVE-2020-14515, CVE-2020-14517, CVE-2020-14519, and ...
17.02.2022
SIEMENS CERT
SSA-244969 V1.1 (Last Update: 2022-02-17): OpenSSL Vulnerability in Industrial Products
Titel
SSA-244969 V1.1 (Last Update: 2022-02-17): OpenSSL Vulnerability in Industrial Products
Veröffentlicht
17. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf
Text
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content. Siemens has released updates for several affected products and recommends to update to ...
17.02.2022
SIEMENS CERT
SSA-949188 V1.0: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.1
Titel
SSA-949188 V1.0: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.1
Veröffentlicht
17. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-949188.pdf
Text
Siemens Simcenter Femap versions before V2022.1.1 are affected by vulnerabilities that could be triggered when the application reads files in .NEU or .BDF format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to leak information or potentially perform ...
16.02.2022
US CERT
AA22-047A: Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Inf...
Titel
AA22-047A: Russian State-Sponsored Cyber Actors Target Cleared Defense Contractor Networks to Obtain Sensitive U.S. Defense Information and Technology
Veröffentlicht
16. Februar 2022 16:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-047a
Text
Original release date: February 16, 2022SummaryActions to Help Protect Against Russian State-Sponsored Malicious Cyber Activity: • Enforce multifactor authentication. • Enforce strong, unique passwords. • Enable M365 Unified Audit Logs. • Implement endpoint detection and response tools. From at least January 2020, through February 2022, the Federal Bureau of Investigation ...
11.02.2022
US CERT (ICS)
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Titel
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Veröffentlicht
11. Februar 2022 04:55
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-07-1
Text
This advisory contains mitigations for Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Write, Heap-based Buffer Overflow, and Out-of-bounds Read vulnerabilities in Siemens Solid Edge, JT2Go, and Teamcenter Visualization software products.
10.02.2022
US CERT (ICS)
Siemens SIMATIC Industrial Products
Titel
Siemens SIMATIC Industrial Products
Veröffentlicht
10. Februar 2022 17:25
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-01
Text
This advisory contains mitigations for Operation on a Resource after Expiration or Release, and Missing Release of Memory after Effective Lifetime vulnerabilities in Siemens Industrial Products using the SIMATIC firmware platform.
10.02.2022
US CERT (ICS)
Siemens SIMATIC WinCC and PCS
Titel
Siemens SIMATIC WinCC and PCS
Veröffentlicht
10. Februar 2022 17:20
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-02
Text
This advisory contains mitigations for a Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Siemens SIMATIC WinCC and PCS industrial automation products.
10.02.2022
US CERT (ICS)
SINEMA Remote Connect Server
Titel
SINEMA Remote Connect Server
Veröffentlicht
10. Februar 2022 17:10
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-04
Text
This advisory contains mitigations for an Open Redirect vulnerability in the SINEMA Remote Connect Server, a management platform for remote networks.
10.02.2022
US CERT (ICS)
SICAM TOOLBOX II
Titel
SICAM TOOLBOX II
Veröffentlicht
10. Februar 2022 17:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-05
Text
This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in the Siemens SICAM TOOLBOX II software platform.
10.02.2022
US CERT (ICS)
Siemens Spectrum Power 4
Titel
Siemens Spectrum Power 4
Veröffentlicht
10. Februar 2022 17:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-041-06
Text
This advisory contains mitigations for a Cross-site scripting vulnerability in Siemens Spectrum Power 4 communications and data modeling software.
10.02.2022
US CERT (ICS)
Siemens COMOS Web (Update A)
Titel
Siemens COMOS Web (Update A)
Veröffentlicht
10. Februar 2022 16:50
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-013-05
Text
This updated advisory is a follow-up to the original advisory titled ICSA-22-013-05 Siemens COMOS Web that was published January 13, 2022, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for Basic XSS, Relative Path Traversal, SQL Injection, and Cross-site Request Forgery vulnerabilities in the Siemens COMOS Web unified ...
10.02.2022
US CERT (ICS)
Siemens Healthineers syngo fastView (Update A)
Titel
Siemens Healthineers syngo fastView (Update A)
Veröffentlicht
10. Februar 2022 16:45
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-350-16
Text
This updated advisory is a follow-up to the original advisory titled ICSA-21-350-16 Siemens Healthineers syngo fastView that was published December 16, 2021, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigation for an Out-of-bounds Write vulnerability in the Siemens Healthineers syngo fastView software for digital imaging and communications.
10.02.2022
US CERT (ICS)
Siemens SIMATIC WinCC (Update A)
Titel
Siemens SIMATIC WinCC (Update A)
Veröffentlicht
10. Februar 2022 16:40
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-315-03
Text
This updated advisory is a follow-up to the original advisory titled ICSA-21-315-03 Siemens SIMATIC WinCC that was published November 11, 2021, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for a Path Traversal, and Insertion of Sensitive Information into Log File vulnerabilities in Siemens SIMATIC WinCC, a SCADA ...
10.02.2022
US CERT (ICS)
Siemens LOGO! CMR and SIMATIC RTU 3000 (Update A)
Titel
Siemens LOGO! CMR and SIMATIC RTU 3000 (Update A)
Veröffentlicht
10. Februar 2022 16:35
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-257-13
Text
This updated advisory is a follow-up to the original advisory titled ICSA-21-257-13 Siemens LOGO! CMR and SIMATIC RTU 3000 that was published September 14, 2021, on the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for a Use of Insufficiently Random Values vulnerability in Siemens LOGO! CMR controllers and SIMATIC ...
09.02.2022
US CERT
AA22-040A: 2021 Trends Show Increased Globalized Threat of Ransomware
Titel
AA22-040A: 2021 Trends Show Increased Globalized Threat of Ransomware
Veröffentlicht
9. Februar 2022 15:00
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-040a
Text
Original release date: February 9, 2022SummaryImmediate Actions You Can Take Now to Protect Against Ransomware: • Update your operating system and software. • Implement user training and phishing exercises to raise awareness about the risk of suspicious links and attachments. • If you use Remote Desktop Protocol (RDP), secure and ...
08.02.2022
US CERT (ICS)
Mitsubishi Electric FA Engineering Software Products (Update D)
Titel
Mitsubishi Electric FA Engineering Software Products (Update D)
Veröffentlicht
8. Februar 2022 16:05
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02
Text
This updated advisory is a follow-up to the advisory update titled ICSA-21-049-02 Mitsubishi Electric FA Engineering Software Products (Update C) that was published November 16, 2021, to the ICS webpage on www.cisa.gov/uscert.This advisory contains mitigations for Heap-based Buffer Overflow, and Improper Handling of Length Parameter Inconsistency vulnerabilities in Mitsubishi Electric ...
08.02.2022
US CERT (ICS)
Mitsubishi Electric Factory Automation Engineering Products (Update F)
Titel
Mitsubishi Electric Factory Automation Engineering Products (Update F)
Veröffentlicht
8. Februar 2022 16:00
URL
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-04
Text
This updated advisory is a follow-up to the advisory update titled ICSA-20-212-04 Mitsubishi Electric Factory Automation Engineering Products (Update E) that was published November 18, 2021, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for an Unquoted Search Path or Element vulnerability in Mitsubishi Electric Factory Automation Engineering ...
08.02.2022
SIEMENS CERT
SSA-780073 V2.0 (Last Update: 2022-02-08): Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets
Titel
SSA-780073 V2.0 (Last Update: 2022-02-08): Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets
Veröffentlicht
8. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-780073.pdf
Text
Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior V06.00 are potentially affected by a denial of service vulnerability when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. Siemens has released updates for several affected products and recommends to update to the new versions. Siemens ...
08.02.2022
SIEMENS CERT
SSA-995338 V1.1 (Last Update: 2022-02-08): Multiple Vulnerabilities in COMOS Web
Titel
SSA-995338 V1.1 (Last Update: 2022-02-08): Multiple Vulnerabilities in COMOS Web
Veröffentlicht
8. Februar 2022 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-995338.pdf
Text
Multiple vulnerabilities were identified in the web components of COMOS that could allow an attacker to conduct code injections, store data in undesired locations, execute arbitrary SQL statements, and run cross-site request forgery attacks. Siemens has released updates for several affected products and recommends to update to the latest versions. ...

Letzte Updates

BOSCH PSIRT
31.10.2024
SIEMENS CERT
26.11.2024
US CERT
08.11.2024
US CERT (ICS)
26.11.2024

Nach Quelle

Archiv

2024
2023
2022
2021
2020
2019
2018
2017

Feeds