Bulletins | CERT@VDE

SSA-959281 V1.0: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Titel

SSA-959281 V1.0: XML File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-959281.html

Text

Siemens Teamcenter Visualization and JT2Go are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, this could cause the application to crash or potentially ...

SSA-039007 V1.1 (Last Update: 2024-10-08): Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Titel

SSA-039007 V1.1 (Last Update: 2024-10-08): Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-039007.html

Text

Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for ...

SSA-148641 V1.3 (Last Update: 2024-10-08): XPath Constraint Vulnerability in Mendix Runtime

Titel

SSA-148641 V1.3 (Last Update: 2024-10-08): XPath Constraint Vulnerability in Mendix Runtime

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-148641.html

Text

A XPath Constraint vulnerability in the Mendix Runtime was discovered, that can affect the running applications. The vulnerability could allow a malicious user to deduce contents of inaccessible attributes and modify sensitive data. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-254396 V1.0: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Titel

SSA-254396 V1.0: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-254396.html

Text

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-097435 V1.2 (Last Update: 2024-10-08): Usernames Disclosure Vulnerability in Mendix Runtime

Titel

SSA-097435 V1.2 (Last Update: 2024-10-08): Usernames Disclosure Vulnerability in Mendix Runtime

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-097435.html

Text

Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-054046 V1.0: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Titel

SSA-054046 V1.0: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-054046.html

Text

Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has released new versions for several affected products and recommends to update to the ...

SSA-321292 V1.6 (Last Update: 2024-10-08): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...

Titel

SSA-321292 V1.6 (Last Update: 2024-10-08): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-321292.html

Text

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. ...

SSA-398330 V1.9 (Last Update: 2024-10-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Titel

SSA-398330 V1.9 (Last Update: 2024-10-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Text

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

SSA-368868 V1.0: Multiple Vulnerabilities in WibuKey for Windows

Titel

SSA-368868 V1.0: Multiple Vulnerabilities in WibuKey for Windows

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-368868.html

Text

Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing. According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below. [1] https://www.wibu.com/products/wibukey.html [2] https://www.wibu.com/support/security-advisories.html WIBU Systems has released a new version for WibuKey for ...

SSA-366067 V1.1 (Last Update: 2024-10-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices

Titel

SSA-366067 V1.1 (Last Update: 2024-10-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-366067.html

Text

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-364175 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Titel

SSA-364175 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Text

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-340240 V1.0: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory

Titel

SSA-340240 V1.0: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-340240.html

Text

A vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-426509 V1.0: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3

Titel

SSA-426509 V1.0: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-426509.html

Text

Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-955858 V1.3 (Last Update: 2024-10-08): Multiple Vulnerabilities in LOGO! 8 BM Devices

Titel

SSA-955858 V1.3 (Last Update: 2024-10-08): Multiple Vulnerabilities in LOGO! 8 BM Devices

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-955858.html

Text

LOGO! 8 BM (incl. SIPLUS variants) contains multiple web-related vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state or retrieve parts of the memory. The vulnerabilities are related to the hardware of the product. Siemens has released new hardware versions ...

SSA-852501 V1.0: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000

Titel

SSA-852501 V1.0: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-852501.html

Text

Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. ...

SSA-850560 V1.0: Use of 4-Digit PIN in SENTRON PAC3200 Devices

Titel

SSA-850560 V1.0: Use of 4-Digit PIN in SENTRON PAC3200 Devices

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-850560.html

Text

SENTRON PAC3200 only provide a 4-digit PIN to protect from administrative access via Modbus TCP interface. Attackers with access to the Modbus TCP interface could easily bypass this protection by brute-force attacks or by monitoring the Modbus cleartext communication. Siemens recommends specific countermeasures for products where fixes are not, or ...

SSA-783481 V1.3 (Last Update: 2024-10-08): Denial-of-Service Vulnerability in LOGO! 8 BM

Titel

SSA-783481 V1.3 (Last Update: 2024-10-08): Denial-of-Service Vulnerability in LOGO! 8 BM

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-783481.html

Text

A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware of the product. Siemens has released new hardware ...

SSA-711309 V2.1 (Last Update: 2024-10-08): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

Titel

SSA-711309 V2.1 (Last Update: 2024-10-08): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

Veröffentlicht

8. Oktober 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-711309.html

Text

The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. Siemens has released new versions for several affected products and ...

September 2024

12.09.2024

SSA-097435 V1.1 (Last Update: 2024-09-12): Usernames Disclosure Vulnerability in Mendix Runtime

Titel

SSA-097435 V1.1 (Last Update: 2024-09-12): Usernames Disclosure Vulnerability in Mendix Runtime

Veröffentlicht

12. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-097435.html

Text

SSA-423808 V1.0: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products

Titel

SSA-423808 V1.0: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products

Veröffentlicht

10. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-423808.html

Text

Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where ...

SSA-417159 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2

Titel

SSA-417159 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP2

Veröffentlicht

10. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-417159.html

Text

SINEMA Remote Connect Client before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.

SSA-446545 V1.0: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products

Titel

SSA-446545 V1.0: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products

Veröffentlicht

10. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-446545.html

Text

An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends ...

SSA-427715 V1.0: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation

Titel

SSA-427715 V1.0: Stack-Based Buffer Overflow Vulnerability in Tecnomatix Plant Simulation

Veröffentlicht

10. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-427715.html

Text

Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially ...

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Titel

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Veröffentlicht

10. September 2024 02:00

URL

https://cert-portal.siemens.com/productcert/html/ssa-359713.html

Text

Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system. Siemens has released new versions for the affected products and recommends to update to the latest versions.