Bulletins | CERT@VDE

Moxa MGate Protocol Gateways

Titel

Moxa MGate Protocol Gateways

Veröffentlicht

23. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-357-01

Text

This advisory contains mitigations for a Cross-site Scripting vulnerability in the Moxa MGate Protocol Gateways, a serial-to-Ethernet Modbus gateway.

23.12.2021

Johnson Controls exacq Enterprise Manager

Titel

Johnson Controls exacq Enterprise Manager

Veröffentlicht

23. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-357-02

Text

This advisory contains mitigations for an Improper Input Validation vulnerability in the Johnson Controls exacq Enterprise Manager tool.

Fresenius Kabi Agilia Connect Infusion System

Titel

Fresenius Kabi Agilia Connect Infusion System

Veröffentlicht

21. Dezember 2021 16:25

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-355-01

Text

This advisory contains mitigations for several vulnerabilities in the Fresenius Kabi Agilia Connect Infusion System.

https://us-cert.cisa.gov/ics/advisories/icsa-21-355-01

mySCADA myPRO

Titel

mySCADA myPRO

Veröffentlicht

21. Dezember 2021 16:20

URL

Text

This advisory contains mitigations for Authentication Bypass Using an Alternate Path or Channel, Use of Password Hash with Insufficient Computational Effort, Hidden Functionality, and OS Command Injection vulnerabilities in the mySCADA myPRO HMI/SCADA system.

Horner Automation Cscape EnvisionRV

Titel

Horner Automation Cscape EnvisionRV

Veröffentlicht

21. Dezember 2021 16:15

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-355-02

Text

This advisory contains mitigations for an Improper Input Validation vulnerability in Horner Automation Cscape EnvisionRV industrial remote viewing software.

Schneider Electric Rack PDU (Update A)

Titel

Schneider Electric Rack PDU (Update A)

Veröffentlicht

21. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-348-02

Text

This updated advisory is a follow-up to the original advisory titled ICSA-21-348-02 Schneider Electric Rack PDU that was published December 14, 2021, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Schneider Electric Rack Power Distribution Unit ...

17.12.2021

Siemens SINUMERIK Edge

Titel

Siemens SINUMERIK Edge

Veröffentlicht

17. Dezember 2021 04:36

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-09

Text

This advisory contains mitigations for an Improper Certificate Validation vulnerability in the Siemens SINUMERIK Edge hardware and software digital production support and optimization platform.

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-01

Xylem AquaView

Titel

Xylem AquaView

Veröffentlicht

16. Dezember 2021 16:52

URL

Text

This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in the Xylem AquaView SCADA system.

Wibu-Systems CodeMeter Runtime

Titel

Wibu-Systems CodeMeter Runtime

Veröffentlicht

16. Dezember 2021 16:48

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-03

Text

This advisory contains mitigations for an Improper Privilege Management vulnerability in the Wibu-Systems CodeMeter Runtime server.

Mitsubishi Electric GX Works2

Titel

Mitsubishi Electric GX Works2

Veröffentlicht

16. Dezember 2021 16:46

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-04

Text

This advisory contains mitigations for an Improper Handling of Length Parameter Inconsistency vulnerability in #Mitsubishi Electric's GX Works2 engineering software.

Mitsubishi Electric FA Engineering Software

Titel

Mitsubishi Electric FA Engineering Software

Veröffentlicht

16. Dezember 2021 16:44

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05

Text

This advisory contains mitigations for Out-of-bounds Read, and Integer Underflow vulnerabilities in Mitsubishi Electric's FA Engineering Software engineering software.

Siemens Capital VSTAR

Titel

Siemens Capital VSTAR

Veröffentlicht

16. Dezember 2021 16:42

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-06

Text

This advisory contains mitigations for a several vulnerabilities in Siemens Capital VSTAR software platform products using Nucleus NET, the networking stack of Nucleus RTOS (real-time operating system).

Siemens POWER METER SICAM Q100

Titel

Siemens POWER METER SICAM Q100

Veröffentlicht

16. Dezember 2021 16:40

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-07

Text

This advisory contains mitigations for a Stack-based Buffer Overflow vulnerability in the Siemens POWER METER SICAM Q100 power monitoring device.

Siemens JTTK and JT Utilities

Titel

Siemens JTTK and JT Utilities

Veröffentlicht

16. Dezember 2021 16:38

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-350-08

Text

This advisory contains mitigations for Out-of-bounds Write, Use after Free, Out-of-bounds Read vulnerability in in the Siemens JTTK programming interface, and JT Utilities series of command line utilities.

14.12.2021

Schneider Electric Rack PDU

Titel

Schneider Electric Rack PDU

Veröffentlicht

14. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-348-02

Text

This advisory contains mitigations for a Cross-site Scripting vulnerability in Schneider Electric Rack Power Distribution Unit (PDU).

14.12.2021

Hillrom Medical Device Management (Update A)

Titel

Hillrom Medical Device Management (Update A)

Veröffentlicht

14. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-152-01

Text

This updated advisory is a follow-up to the original advisory titled ICSA-21-152-01 Hillrom Medical Device Management that was published June 1, 2021, to the ICS webpage at www.cisa.gov/uscert. This advisory contains mitigations for a Out-of-Bounds Write, an d Out-of-Bounds Read vulnerabilities in Hillrom Welch Allyn medical device management tools.

09.12.2021

Hillrom Welch Allyn Cardio Products

Titel

Hillrom Welch Allyn Cardio Products

Veröffentlicht

9. Dezember 2021 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsma-21-343-01

Text

This advisory contains mitigations for an Authentication Bypass Using an Alternate Path or Channel vulnerability in Hillrom Welch Allyn cardiology devices.

09.12.2021

Hitachi Energy GMS600, PWC600, and Relion

Titel

Hitachi Energy GMS600, PWC600, and Relion

Veröffentlicht

9. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-343-01

Text

This advisory contains mitigations for an Improper Access Controls vulnerability in Hitachi Energy GMS600, PWC600, and Relion circuit breaker monitoring systems.

07.12.2021

Hitachi Energy RTU500 OpenLDAP

Titel

Hitachi Energy RTU500 OpenLDAP

Veröffentlicht

7. Dezember 2021 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-341-01

Text

This advisory contains mitigations for Type Confusion, and Reachable Assertion vulnerabilities in Hitachi Energy RTU500 OpenLDAP firmware.

07.12.2021

Hitachi Energy XMC20 and FOX61x

Titel

Hitachi Energy XMC20 and FOX61x

Veröffentlicht

7. Dezember 2021 16:05

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-341-02

Text

This advisory contains mitigations for Weak Password Requirements, and Missing Handler vulnerabilities in Hitachi Energy XMC20 and FOX61x multi-service network elements.

07.12.2021

FANUC Robot Controllers

Titel

FANUC Robot Controllers

Veröffentlicht

7. Dezember 2021 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-21-243-02

Text

This advisory is a follow-up to the original advisory titled ICSA-21-243-02P FANUC Robot Controllers that was posted to the HSIN ICS library on August 31, 2021. This advisory contains mitigations for Integer Coercion Error, and Out-of-bounds Write vulnerabilities in FANUC Robot Controllers.

02.12.2021