• 1
  • 2 (current)
Dienstag, 08.09.2020
02:00
SIEMENS CERT
SSA-568969 (Last Update: 2020-09-08): Insecure Storage of Sensitive Information in Spectrum Power™ 4
Titel
SSA-568969 (Last Update: 2020-09-08): Insecure Storage of Sensitive Information in Spectrum Power™ 4
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-568969.pdf
Text
Vulnerabilities in Spectrum Power™ 4 could allow an unauthorized attacker to retrieve a list of software users, or in certain cases to list the contents of a directory. Siemens has released updates and configuration recommendations for Spectrum Power™ 4 in order to mitigate the issues.
02:00
SIEMENS CERT
SSA-709003 (Last Update: 2020-09-08): Privilege Escalation Vulnerability in License Management Utility (LMU)
Titel
SSA-709003 (Last Update: 2020-09-08): Privilege Escalation Vulnerability in License Management Utility (LMU)
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-709003.pdf
Text
The latest update for the License Management Utility (LMU), which is used by multiple Siemens building technology products, fixes a vulnerability that could allow local users to escalate privileges and execute code as local SYSTEM user. Siemens has released an update version of LMU, recommends to install this update on ...
02:00
SIEMENS CERT
SSA-770698 (Last Update: 2020-09-08): User Information Disclosure Vulnerability in Siveillance Video Client
Titel
SSA-770698 (Last Update: 2020-09-08): User Information Disclosure Vulnerability in Siveillance Video Client
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf
Text
The Siveillance Video Client contains an information disclosure vulnerability that could allow an attacker to obtain valid adminstrator login names and use this information to launch further attacks. Siemens recommends specific countermeasures and provides patches for released versions of the Siveillance Video Client.
02:00
SIEMENS CERT
SSA-102233 (Last Update: 2020-09-08): SegmentSmack in VxWorks-based Industrial Devices
Titel
SSA-102233 (Last Update: 2020-09-08): SegmentSmack in VxWorks-based Industrial Devices
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf
Text
The latest updates for the affected products fix a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens is ...
02:00
SIEMENS CERT
SSA-270778 (Last Update: 2020-09-08): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software
Titel
SSA-270778 (Last Update: 2020-09-08): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf
Text
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain circumstances (versions prior to SIMATIC WinCC V7.3 or SIMATIC PCS 7 V8.1 are ...
02:00
SIEMENS CERT
SSA-312271 (Last Update: 2020-09-08): Unquoted Search Path Vulnerabilities in Windows-based Industrial Software Applications
Titel
SSA-312271 (Last Update: 2020-09-08): Unquoted Search Path Vulnerabilities in Windows-based Industrial Software Applications
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf
Text
The latest update for affected products fix local privilege escalation vulnerabilities that could allow authorized local users with administrative privileges to execute custom code with SYSTEM level privileges. Siemens has released updates for some of the affected products, and is working on further updates. For the remaining affected products, Siemens ...
02:00
SIEMENS CERT
SSA-377115 (Last Update: 2020-09-08): SegmentSmack in Linux IP-Stack based Industrial Devices
Titel
SSA-377115 (Last Update: 2020-09-08): SegmentSmack in Linux IP-Stack based Industrial Devices
Veröffentlicht
8. September 2020 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf
Text
The latest updates for the affected products fix a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has ...
Dienstag, 01.09.2020
14:30
US CERT
AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity
Titel
AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity
Veröffentlicht
1. September 2020 14:30
URL
https://us-cert.cisa.gov/ncas/alerts/aa20-245a
Text
Original release date: September 1, 2020 | Last revised: September 24, 2020SummaryThis joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia,[1] Canada,[2] New Zealand,[3][4] the United Kingdom,[5] and the United States.[6] It highlights technical approaches to uncovering malicious activity and includes ...
  • 1
  • 2 (current)

Letzte Updates

BOSCH PSIRT
31.10.2024
SIEMENS CERT
22.11.2024
US CERT
08.11.2024
US CERT (ICS)
21.11.2024

Nach Quelle

Archiv

2024
2023
2022
2021
2020
2019
2018
2017

Feeds