Bulletins | CERT@VDE

KUNBUS GmbH Revolution Pi

Title

KUNBUS GmbH Revolution Pi

Published

May 1, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: KUNBUS Equipment: Revolution Pi Vulnerabilities: Missing Authentication for Critical Function, Authentication Bypass by Primary Weakness, Improper Neutralization of Server-Side Includes (SSI) Within a Web Page 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers ...

April 2025

25.04.2025

BOSCH PSIRT

Multiple ctrlX OS vulnerabilities

Title

Multiple ctrlX OS vulnerabilities

Published

April 25, 2025, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-640452.html

Summary

BOSCH-SA-640452: The base ctrlX OS apps Device Admin and Solutions contain multiple vulnerabilities. In a worst case scenario, a remote authenticated (low-privileged) attacker might be able to execute arbitrary OS commands running with higher privileges. The vulnerabilities have been uncovered and disclosed responsibly by Nozomi. We thank them for making ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05

Johnson Controls ICU

Title

Johnson Controls ICU

Published

April 24, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: ICU Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Johnson Controls reports the following ...

ALBEDO Telecom Net.Time - PTP/NTP Clock

Title

ALBEDO Telecom Net.Time - PTP/NTP Clock

Published

April 24, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: ALBEDO Telecom Equipment: Net.Time - PTP/NTP clock Vulnerability: Insufficient Session Expiration 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to transmit passwords over unencrypted connections, resulting in the product becoming vulnerable to ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-03

Vestel AC Charger

Title

Vestel AC Charger

Published

April 24, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vestel Equipment: AC Charger Vulnerability: Exposure of Sensitive System Information to an Unauthorized Control Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker access to sensitive information, such as credentials which could ...

Planet Technology Network Products

Title

Planet Technology Network Products

Published

April 24, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Planet Technology Equipment: Planet Technology Network Products Vulnerabilities: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Use of Hard-coded Credentials, Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of ...

Nice Linear eMerge E3

Title

Nice Linear eMerge E3

Published

April 24, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Nice Equipment: Linear eMerge E3 Vulnerability: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary OS commands. ...

Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

Title

Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

Published

April 24, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: iSTAR Configuration Utility (ICU) Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Johnson Controls ...

Siemens TeleControl Server Basic

Title

Siemens TeleControl Server Basic

Published

April 22, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-02

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Siemens TeleControl Server Basic SQL

Title

Siemens TeleControl Server Basic SQL

Published

April 22, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01

Summary

Schneider Electric Wiser Home Controller WHC-5918A

Title

Schneider Electric Wiser Home Controller WHC-5918A

Published

April 22, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Wiser Home Controller WHC-5918A Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to disclose sensitive credentials. 3. TECHNICAL DETAILS 3.1 ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-04

ABB MV Drives

Title

ABB MV Drives

Published

April 22, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: MV Drives Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain full ...

Schneider Electric Sage Series

Title

Schneider Electric Sage Series

Published

April 17, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Sage series Vulnerabilities: Out-of-bounds Write, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Incorrect Default Permissions, Unchecked Return Value, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds ...

Schneider Electric Trio Q Licensed Data Radio

Title

Schneider Electric Trio Q Licensed Data Radio

Published

April 17, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.4 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Trio Q Licensed Data Radio Vulnerabilities: Insecure Storage of Sensitive Information, Initialization of a Resource with an Insecure Default 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access confidential ...

Schneider Electric ConneXium Network Manager

Title

Schneider Electric ConneXium Network Manager

Published

April 17, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: ConneXium Network Manager Vulnerabilities: Files or Directories Accessible to External Parties, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access sensitive data, escalate privileges, or ...

Yokogawa Recorder Products

Title

Yokogawa Recorder Products

Published

April 17, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-107-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Yokogawa Equipment: GX10, GX20, GP10, GP20, GM Data Acquisition System, DX1000, DX2000, DX1000N, FX1000, μR10000, μR20000, MW100, DX1000T, DX2000T, CX1000, CX2000 Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could ...

SSA-819629 V1.1 (Last Update: 2025-04-17): Weak Authentication Vulnerability in Industrial Edge Device Kit

Title

SSA-819629 V1.1 (Last Update: 2025-04-17): Weak Authentication Vulnerability in Industrial Edge Device Kit

Published

April 17, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-819629.html

Summary

Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge ...

SSA-395348 V1.0: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2

Title

SSA-395348 V1.0: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2

Published

April 16, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-395348.html

Summary

TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service condition. Siemens has released a new version for TeleControl Server Basic and recommends to ...

SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Title

SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Published

April 16, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-366067.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or ...

SSA-832273 V1.8 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Title

SSA-832273 V1.8 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Published

April 16, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-832273.html

Summary

SSA-443402 V1.0: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2

Title

SSA-443402 V1.0: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2

Published

April 16, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-443402.html

Summary

TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application’s DB, cause denial of service and execute code in an OS shell with limited “NT AUTHORITY” permissions. Siemens has conducted a root-cause analysis for potential SQL injection vulnerabilities ...

Siemens Industrial Edge Device Kit

Title

Siemens Industrial Edge Device Kit

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-02

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

Lantronix Xport

Title

Lantronix Xport

Published

April 15, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Lantronix Equipment: Xport Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations. 3. TECHNICAL ...

Delta Electronics COMMGR

Title

Delta Electronics COMMGR

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-07

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: COMMGR Vulnerability: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for an attacker to remotely access the AS3000Simulator family in the COMMGR software ...