Bulletins | CERT@VDE

Fuji Electric Tellus Lite V-Simulator

Titel

Fuji Electric Tellus Lite V-Simulator

Veröffentlicht

20. Dezember 2022 16:25

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-354-01

Text

16:20

Rockwell Automation GuardLogix and ControlLogix controllers

Titel

Rockwell Automation GuardLogix and ControlLogix controllers

Veröffentlicht

20. Dezember 2022 16:20

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-354-02

Text

16:10

Rockwell Automation MicroLogix 1100 and 1400

Titel

Rockwell Automation MicroLogix 1100 and 1400

Veröffentlicht

20. Dezember 2022 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-354-04

Text

16:05

Delta 4G Router DX-3021

Titel

Delta 4G Router DX-3021

Veröffentlicht

20. Dezember 2022 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-354-05

Text

16:00

Prosys OPC UA Simulation Server (Update A)

Titel

Prosys OPC UA Simulation Server (Update A)

Veröffentlicht

20. Dezember 2022 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-01

Text

Donnerstag, 15.12.2022

19:20

Prosys OPC UA Simulation Server

Titel

Prosys OPC UA Simulation Server

Veröffentlicht

15. Dezember 2022 19:20

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-01

Text

19:15

Siemens SCALANCE X-200RNA Switch Devices

Titel

Siemens SCALANCE X-200RNA Switch Devices

Veröffentlicht

15. Dezember 2022 19:15

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-02

Text

19:10

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Titel

Siemens Multiple Denial of Service Vulnerabilities in Industrial Products

Veröffentlicht

15. Dezember 2022 19:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-03

Text

19:05

Siemens Multiple Vulnerabilities in SCALANCE Products

Titel

Siemens Multiple Vulnerabilities in SCALANCE Products

Veröffentlicht

15. Dezember 2022 19:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-04

Text

19:00

Siemens PLM Help Server

Titel

Siemens PLM Help Server

Veröffentlicht

15. Dezember 2022 19:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-346-05

Text

18:55

Siemens SIMATIC WinCC OA Ultralight Client

Titel

Siemens SIMATIC WinCC OA Ultralight Client

Veröffentlicht

15. Dezember 2022 18:55

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-06

Text

18:40

Siemens Products affected by OpenSSL 3.0

Titel

Siemens Products affected by OpenSSL 3.0

Veröffentlicht

15. Dezember 2022 18:40

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-09

Text

This advisory contains mitigations for a Classic Buffer Overflow vulnerabilities in Siemens Calibre ICE, Mcenter, SCALANCE X-200RNA switch family, SICAM GridPass, and SIMATIC RTLS Locating Manager products.

18:35

Siemens APOGEE/TALON Field Panels

Titel

Siemens APOGEE/TALON Field Panels

Veröffentlicht

15. Dezember 2022 18:35

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-349-10

Text

This advisory contains mitigations for a Predictable Exact Value From Previous Values vulnerability in Simens APOGEE PXC/TALON TC software.

Dienstag, 13.12.2022

16:10

ICONICS and Mitsubishi Electric Products

Titel

ICONICS and Mitsubishi Electric Products

Veröffentlicht

13. Dezember 2022 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-347-01

Text

16:05

Schneider Electric APC Easy UPS Online

Titel

Schneider Electric APC Easy UPS Online

Veröffentlicht

13. Dezember 2022 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-347-02

Text

16:00

Contec CONPROSSYS HMI System (CHS)

Titel

Contec CONPROSSYS HMI System (CHS)

Veröffentlicht

13. Dezember 2022 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-347-03

Text

SSA-593272 V1.8 (Last Update: 2022-12-13): SegmentSmack in Interniche IP-Stack based Industrial Devices

Titel

SSA-593272 V1.8 (Last Update: 2022-12-13): SegmentSmack in Interniche IP-Stack based Industrial Devices

Veröffentlicht

13. Dezember 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-593272.pdf

Text

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released updates for several ...

SSA-638652 V1.2 (Last Update: 2022-12-13): Authentication Bypass Vulnerability in Mendix SAML Module

Titel

SSA-638652 V1.2 (Last Update: 2022-12-13): Authentication Bypass Vulnerability in Mendix SAML Module

Veröffentlicht

13. Dezember 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf

Text

The Mendix SAML module insufficiently protects from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. Note: For compatibility reasons, fix versions are ...

SSA-930100 V1.0: Privilege Escalation Vulnerability in Simcenter STAR-CCM+

Titel

SSA-930100 V1.0: Privilege Escalation Vulnerability in Simcenter STAR-CCM+

Veröffentlicht

13. Dezember 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-930100.pdf

Text

Simcenter STAR-CCM+ contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-678983 V1.6 (Last Update: 2022-12-13): Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)

Titel

SSA-678983 V1.6 (Last Update: 2022-12-13): Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)

Veröffentlicht

13. Dezember 2022 01:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf

Text

Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens IPC related products, that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8745 ...