Bulletins | CERT@VDE

SSA-599506 V1.0: Command Injection in RUGGEDCOM ROX

Titel

SSA-599506 V1.0: Command Injection in RUGGEDCOM ROX

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-599506.pdf

Text

RUGGEDCOM ROX devices are affected by a command injection vulnerability that could allow an attacker with administrative privileges to gain root access. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-944952 V1.0: Authentication Bypass Vulnerability in Opcenter Quality

Titel

SSA-944952 V1.0: Authentication Bypass Vulnerability in Opcenter Quality

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-944952.pdf

Text

Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules using IbsGailWrapper-interface. After issuing the record the authentication bypass vulnerability could take ...

SSA-309571 V1.4 (Last Update: 2022-07-12): IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)

Titel

SSA-309571 V1.4 (Last Update: 2022-07-12): IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf

Text

Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we summarize: “2021.1 IPU – Intel® CSME, SPS and LMS Advisory” Intel-SA-00459, “2021.1 ...

SSA-517377 V1.0: Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices

Titel

SSA-517377 V1.0: Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-517377.pdf

Text

The below referenced devices contain multiple vulnerabilities that could be exploited when the SINEMA Remote Connect Server (SRCS) VPN feature is used. The feature is not activated by default. The most severe could allow an attacker to execute arbitrary code with elevated privileges under certain circumstances. Siemens has released an ...

SSA-306654 V1.2 (Last Update: 2022-07-12): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Titel

SSA-306654 V1.2 (Last Update: 2022-07-12): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Text

Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-243317 V1.0: File Parsing Vulnerability in Simcenter Femap and Parasolid

Titel

SSA-243317 V1.0: File Parsing Vulnerability in Simcenter Femap and Parasolid

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-243317.pdf

Text

Simcenter Femap and Parasolid are affected by an out of bounds read vulnerability that could be triggered when the application reads files in NEU format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution ...

SSA-310038 V1.0: Multiple Vulnerabilities in SCALANCE X Switch Devices

Titel

SSA-310038 V1.0: Multiple Vulnerabilities in SCALANCE X Switch Devices

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-310038.pdf

Text

Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates ...

SSA-429204 V1.0: Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Titel

SSA-429204 V1.0: Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-429204.pdf

Text

JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens ...

SSA-492173 V1.0: Expression Injection Vulnerability in Mendix Applications

Titel

SSA-492173 V1.0: Expression Injection Vulnerability in Mendix Applications

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-492173.pdf

Text

An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix is used. Mendix has released updates for the affected product lines, recommends to ...

SSA-433782 V1.0: Improper Access Control Vulnerability in Mendix

Titel

SSA-433782 V1.0: Improper Access Control Vulnerability in Mendix

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-433782.pdf

Text

An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has released updates for the affected products and recommends to update to the latest ...

SSA-285795 V1.1 (Last Update: 2022-07-12): Denial of Service in OPC-UA in Industrial Products

Titel

SSA-285795 V1.1 (Last Update: 2022-07-12): Denial of Service in OPC-UA in Industrial Products

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-285795.pdf

Text

Vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has released updates for several affected products and recommends to update to the ...

SSA-580125 V1.0: Multiple Vulnerabilities in SIMATIC eaSie Core Package

Titel

SSA-580125 V1.0: Multiple Vulnerabilities in SIMATIC eaSie Core Package

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-580125.pdf

Text

SIMATIC eaSie PCS 7 Skill Package contains multiple vulnerabilities that could allow an attacker to send arbitrary messages to the underlying message passing framework of the affected system or crash the attached application. Siemens has released an update for the SIMATIC eaSie Core Package and recommends to update to the ...

SSA-225578 V1.0: Improper Access Control in SICAM GridEdge

Titel

SSA-225578 V1.0: Improper Access Control in SICAM GridEdge

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-225578.pdf

Text

The SICAM GridEdge software contains a improper access control vulnerability. This could allow persons with local access to the host system to inject an SSH key. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates ...

SSA-910883 V1.0: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives

Titel

SSA-910883 V1.0: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf

Text

Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a DHCP client vulnerability (CVE-2021-29998) in the integrated SCALANCE X206-1 device. The vulnerability could allow an attacker to cause a heap-based buffer overflow on that device and use it to get access to the drive’s internal network. The list ...

SSA-610768 V1.0: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module

Titel

SSA-610768 V1.0: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-610768.pdf

Text

The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability. Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.

SSA-321292 V1.1 (Last Update: 2022-07-12): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...

Titel

SSA-321292 V1.1 (Last Update: 2022-07-12): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Veröffentlicht

12. Juli 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-321292.pdf

Text

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...

Juni 2022

21.06.2022

SSA-111512 V1.0: Client-side Authentication in SIMATIC WinCC OA

Titel

SSA-111512 V1.0: Client-side Authentication in SIMATIC WinCC OA

Veröffentlicht

21. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-111512.pdf

Text

SIMATIC WinCC OA implements client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated. Siemens recommends to enable server-side authentication (SSA) or Kerberos authentication for all WinCC OA projects, as documented ...

SSA-301589 V1.3 (Last Update: 2022-06-14): Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization

Titel

SSA-301589 V1.3 (Last Update: 2022-06-14): Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf

Text

Siemens has released updates for JT2Go, Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the application to crash or potentially lead to ...

SSA-732250 V1.1 (Last Update: 2022-06-14): Libcurl Vulnerabilities in Industrial Devices

Titel

SSA-732250 V1.1 (Last Update: 2022-06-14): Libcurl Vulnerabilities in Industrial Devices

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf

Text

Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not ...

SSA-941426 V1.2 (Last Update: 2022-06-14): Multiple LLDP Vulnerabilities in Industrial Products

Titel

SSA-941426 V1.2 (Last Update: 2022-06-14): Multiple LLDP Vulnerabilities in Industrial Products

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf

Text

There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-911567 V1.0: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2

Titel

SSA-911567 V1.0: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-911567.pdf

Text

SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update for the SINEMA Remote Connect Server and recommends to update to ...

SSA-363107 V1.1 (Last Update: 2022-06-14): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Titel

SSA-363107 V1.1 (Last Update: 2022-06-14): An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-363107.pdf

Text

A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Titel

SSA-693555 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-693555.pdf

Text

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-978220 V1.7 (Last Update: 2022-06-14): Denial of Service Vulnerability over SNMP in Multiple Industrial Products

Titel

SSA-978220 V1.7 (Last Update: 2022-06-14): Denial of Service Vulnerability over SNMP in Multiple Industrial Products

Veröffentlicht

14. Juni 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf

Text

Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released updates for several affected products and recommends to update to the new versions. Siemens is preparing further updates ...