• 1 (current)
  • 2
  • 3
Dienstag, 20.05.2025
21:20
US CERT
Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations
Titel
Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations
Veröffentlicht
20. Mai 2025 21:20
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-141b
Text
Summary The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint advisory to disseminate known tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) associated with threat actors deploying the LummaC2 information stealer (infostealer) malware. LummaC2 malware is able to infiltrate ...
14:00
US CERT (ICS)
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL
Titel
Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-07
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Galaxy VS, Galaxy VL, Galaxy VXL Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform unauthenticated remote code execution. 3. TECHNICAL DETAILS ...
14:00
US CERT (ICS)
National Instruments Circuit Design Suite
Titel
National Instruments Circuit Design Suite
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: Circuit Design Suite Vulnerabilities: Out-of-bounds Write, Out-of-bounds Read, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code. 3. TECHNICAL DETAILS 3.1 ...
14:00
US CERT (ICS)
Danfoss AK-SM 8xxA Series
Titel
Danfoss AK-SM 8xxA Series
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.3 ATTENTION: Exploitable remotely Vendor: Danfoss Equipment: AK-SM 8xxA Series Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could enable a remote attacker to bypass authentication and execute arbitrary code remotely. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions ...
14:00
US CERT (ICS)
Schneider Electric PrismaSeT Active - Wireless Panel Server
Titel
Schneider Electric PrismaSeT Active - Wireless Panel Server
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-06
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: PrismaSeT Active - Wireless Panel Server Vulnerability: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unauthorized code execution, which could result ...
14:00
US CERT (ICS)
Siemens Siveillance Video
Titel
Siemens Siveillance Video
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-05
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
ABUP IoT Cloud Platform
Titel
ABUP IoT Cloud Platform
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.9 ATTENTION: Exploitable remotely/Low attack complexity Vendor: ABUP Equipment: ABUP Internet of Things (IoT) Cloud Platform Vulnerability: Incorrect Privilege Assignment 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access device profiles for which they are not authorized. 3. ...
14:00
US CERT (ICS)
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products
Titel
Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric Equipment: ICONICS Product Suite and Mitsubishi Electric MC Works64 Vulnerability: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could result in information tampering on the target ...
14:00
US CERT (ICS)
AutomationDirect MB-Gateway
Titel
AutomationDirect MB-Gateway
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: AutomationDirect Equipment: MB-Gateway Vulnerability: Missing Authentication For Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to make configuration changes, disrupt operations, or achieve arbitrary code execution. 3. TECHNICAL DETAILS 3.1 ...
14:00
US CERT (ICS)
Vertiv Liebert RDU101 and UNITY
Titel
Vertiv Liebert RDU101 and UNITY
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vertiv Equipment: Liebert RDU101 and Liebert UNITY Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition ...
14:00
US CERT (ICS)
Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration
Titel
Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration
Veröffentlicht
20. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Assured Telematics Inc. Equipment: Fleet Management System Vulnerabilities: Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker collecting sensitive file system information ...
Donnerstag, 15.05.2025
14:00
US CERT (ICS)
Siemens SIPROTEC and SICAM
Titel
Siemens SIPROTEC and SICAM
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-05
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens VersiCharge AC Series EV Chargers
Titel
Siemens VersiCharge AC Series EV Chargers
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-08
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Desigo
Titel
Siemens Desigo
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-04
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens OZW Web Servers
Titel
Siemens OZW Web Servers
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-10
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens IPC RS-828A
Titel
Siemens IPC RS-828A
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-07
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Mendix OIDC SSO
Titel
Siemens Mendix OIDC SSO
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-15
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
Titel
Siemens SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-13
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Polarion
Titel
Siemens Polarion
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-11
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens BACnet ATEC Devices
Titel
Siemens BACnet ATEC Devices
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-03
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
ECOVACS DEEBOT Vacuum and Base Station
Titel
ECOVACS DEEBOT Vacuum and Base Station
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: ECOVACS Equipment: DEEBOT Vacuum and Base Station Vulnerabilities: Use of Hard-coded Cryptographic Key, Download of Code Without Integrity Check 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to send malicious updates to ...
14:00
US CERT (ICS)
Siemens MS/TP Point Pickup Module
Titel
Siemens MS/TP Point Pickup Module
Veröffentlicht
15. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-16
Text
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
Mittwoch, 14.05.2025
02:00
SIEMENS CERT
SSA-556937 V1.1 (Last Update: 2025-05-14): Multiple Vulnerabilities in VersiCharge AC Series EV Chargers
Titel
SSA-556937 V1.1 (Last Update: 2025-05-14): Multiple Vulnerabilities in VersiCharge AC Series EV Chargers
Veröffentlicht
14. Mai 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-556937.html
Text
VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware. Siemens recommends countermeasures for products where fixes are not, or not yet available.
02:00
SIEMENS CERT
SSA-552330 V1.0: System Configuration Password Reset in Siveillance Video V2024 R1
Titel
SSA-552330 V1.0: System Configuration Password Reset in Siveillance Video V2024 R1
Veröffentlicht
14. Mai 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-552330.html
Text
The installer of Siveillance Video V2024 R1 resets the system configuration password when updating from older versions of Siveillance Video. This could inadvertently remove the password protection from system configuration files, also affecting backup data sets that were created after the update to V2024 R1. Siemens recommends to change the ...
Dienstag, 13.05.2025
14:00
US CERT (ICS)
Hitachi Energy Service Suite
Titel
Hitachi Energy Service Suite
Veröffentlicht
13. Mai 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Service Suite Vulnerabilities: Use of Less Trusted Source, Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), Integer Overflow or Wraparound, Out-of-bounds Write, Allocation of Resources Without Limits or Throttling, Exposure of Sensitive Information ...
  • 1 (current)
  • 2
  • 3

Letzte Updates

BOSCH PSIRT
25.04.2025
SIEMENS CERT
14.05.2025
US CERT
20.05.2025
US CERT (ICS)
20.05.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds