Bulletins | CERT@VDE

Schneider Electric Rack PDU (Update A)

Titel

Schneider Electric Rack PDU (Update A)

Veröffentlicht

21. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-348-02

Text

This updated advisory is a follow-up to the original advisory titled ICSA-21-348-02 Schneider Electric Rack PDU that was published December 14, 2021, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Schneider Electric Rack Power Distribution Unit ...

17.12.2021

Siemens SINUMERIK Edge

Titel

Siemens SINUMERIK Edge

Veröffentlicht

17. Dezember 2021 04:36

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-09

Text

This advisory contains mitigations for an Improper Certificate Validation vulnerability in the Siemens SINUMERIK Edge hardware and software digital production support and optimization platform.

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-01

Xylem AquaView

Titel

Xylem AquaView

Veröffentlicht

16. Dezember 2021 16:52

URL

Text

This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in the Xylem AquaView SCADA system.

Wibu-Systems CodeMeter Runtime

Titel

Wibu-Systems CodeMeter Runtime

Veröffentlicht

16. Dezember 2021 16:48

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-03

Text

This advisory contains mitigations for an Improper Privilege Management vulnerability in the Wibu-Systems CodeMeter Runtime server.

Mitsubishi Electric GX Works2

Titel

Mitsubishi Electric GX Works2

Veröffentlicht

16. Dezember 2021 16:46

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-04

Text

This advisory contains mitigations for an Improper Handling of Length Parameter Inconsistency vulnerability in #Mitsubishi Electric's GX Works2 engineering software.

Mitsubishi Electric FA Engineering Software

Titel

Mitsubishi Electric FA Engineering Software

Veröffentlicht

16. Dezember 2021 16:44

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05

Text

This advisory contains mitigations for Out-of-bounds Read, and Integer Underflow vulnerabilities in Mitsubishi Electric's FA Engineering Software engineering software.

Siemens Capital VSTAR

Titel

Siemens Capital VSTAR

Veröffentlicht

16. Dezember 2021 16:42

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-06

Text

This advisory contains mitigations for a several vulnerabilities in Siemens Capital VSTAR software platform products using Nucleus NET, the networking stack of Nucleus RTOS (real-time operating system).

Siemens POWER METER SICAM Q100

Titel

Siemens POWER METER SICAM Q100

Veröffentlicht

16. Dezember 2021 16:40

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-07

Text

This advisory contains mitigations for a Stack-based Buffer Overflow vulnerability in the Siemens POWER METER SICAM Q100 power monitoring device.

Siemens JTTK and JT Utilities

Titel

Siemens JTTK and JT Utilities

Veröffentlicht

16. Dezember 2021 16:38

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-08

Text

This advisory contains mitigations for Out-of-bounds Write, Use after Free, Out-of-bounds Read vulnerability in in the Siemens JTTK programming interface, and JT Utilities series of command line utilities.

14.12.2021

Schneider Electric Rack PDU

Titel

Schneider Electric Rack PDU

Veröffentlicht

14. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-348-02

Text

This advisory contains mitigations for a Cross-site Scripting vulnerability in Schneider Electric Rack Power Distribution Unit (PDU).

14.12.2021

Hillrom Medical Device Management (Update A)

Titel

Hillrom Medical Device Management (Update A)

Veröffentlicht

14. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-152-01

Text

This updated advisory is a follow-up to the original advisory titled ICSA-21-152-01 Hillrom Medical Device Management that was published June 1, 2021, to the ICS webpage at www.cisa.gov/uscert. This advisory contains mitigations for a Out-of-Bounds Write, an d Out-of-Bounds Read vulnerabilities in Hillrom Welch Allyn medical device management tools.

09.12.2021

Hillrom Welch Allyn Cardio Products

Titel

Hillrom Welch Allyn Cardio Products

Veröffentlicht

9. Dezember 2021 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-343-01

Text

This advisory contains mitigations for an Authentication Bypass Using an Alternate Path or Channel vulnerability in Hillrom Welch Allyn cardiology devices.

09.12.2021

Hitachi Energy GMS600, PWC600, and Relion

Titel

Hitachi Energy GMS600, PWC600, and Relion

Veröffentlicht

9. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-343-01

Text

This advisory contains mitigations for an Improper Access Controls vulnerability in Hitachi Energy GMS600, PWC600, and Relion circuit breaker monitoring systems.

07.12.2021

Hitachi Energy RTU500 OpenLDAP

Titel

Hitachi Energy RTU500 OpenLDAP

Veröffentlicht

7. Dezember 2021 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-341-01

Text

This advisory contains mitigations for Type Confusion, and Reachable Assertion vulnerabilities in Hitachi Energy RTU500 OpenLDAP firmware.

07.12.2021

Hitachi Energy XMC20 and FOX61x

Titel

Hitachi Energy XMC20 and FOX61x

Veröffentlicht

7. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-341-02

Text

This advisory contains mitigations for Weak Password Requirements, and Missing Handler vulnerabilities in Hitachi Energy XMC20 and FOX61x multi-service network elements.

07.12.2021

FANUC Robot Controllers

Titel

FANUC Robot Controllers

Veröffentlicht

7. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-243-02

Text

This advisory is a follow-up to the original advisory titled ICSA-21-243-02P FANUC Robot Controllers that was posted to the HSIN ICS library on August 31, 2021. This advisory contains mitigations for Integer Coercion Error, and Out-of-bounds Write vulnerabilities in FANUC Robot Controllers.

Schneider Electric SESU

Titel

Schneider Electric SESU

Veröffentlicht

2. Dezember 2021 16:35

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-01

Text

This advisory contains mitigations for an Insufficient Entropy vulnerability in the Schneider Electric Software Update.

Johnson Controls Entrapass

Titel

Johnson Controls Entrapass

Veröffentlicht

2. Dezember 2021 16:30

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-02

Text

This advisory contains mitigations for a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Johnson Controls Entrapass security management software.

Distributed Data Systems WebHMI

Titel

Distributed Data Systems WebHMI

Veröffentlicht

2. Dezember 2021 16:25

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-03

Text

This advisory contains mitigations for Authentication Bypass by Primary Weakness, and Unrestricted Upload of File with Dangerous Type vulnerabilities in Distributed Data Systems WebHMI SCADA systems.

Hitachi Energy RTU500 series BCI

Titel

Hitachi Energy RTU500 series BCI

Veröffentlicht

2. Dezember 2021 16:20

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-04

Text

This advisory contains mitigations for an Improper Input Validation vulnerability in Hitachi Energy RTU500 series BCI remote terminal units.

Hitachi Energy Relion 670/650/SAM600-IO

Titel

Hitachi Energy Relion 670/650/SAM600-IO

Veröffentlicht

2. Dezember 2021 16:15

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-05

Text

This advisory contains mitigations for an Insecure Default Initialization of Resource vulnerability in Hitachi Energy Relion 670/650/SAM600-IO Intelligent Electronic Devices (IEDs).

Hitachi Energy APM Edge

Titel

Hitachi Energy APM Edge

Veröffentlicht

2. Dezember 2021 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-06

Text

This advisory contains mitigations for a Using Components with Known Vulnerabilities vulnerability in Hitachi Energy Transformer Asset Performance Management (APM) Edge software.

Hitachi Energy PCM600 Update Manager

Titel

Hitachi Energy PCM600 Update Manager

Veröffentlicht

2. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-07

Text

This advisory contains mitigations for a Improper Certificate Validation vulnerability in Hitachi Energy PCM600 Update Manager protection and control IED software.

Hitachi Energy RTU500 series

Titel

Hitachi Energy RTU500 series

Veröffentlicht

2. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-336-08

Text

This advisory contains mitigations for Observable Discrepancy, Buffer Over-read, and Out-of-bounds Read vulnerabilities in Hitachi Energy RTU500 remote terminal units.

November 2021

30.11.2021