Bulletins | CERT@VDE

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Title

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-357412.html

Summary

NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on ...

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Title

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-659443.html

Summary

COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Title

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-180704.html

Summary

SCALANCE M-800 family before V8.0 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

SSA-999588 V1.4 (Last Update: 2024-08-13): Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2

Title

SSA-999588 V1.4 (Last Update: 2024-08-13): Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-999588.html

Summary

Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes ...

SSA-716317 V1.0: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0

Title

SSA-716317 V1.0: Multiple Vulnerability in SINEC Traffic Analyzer Before V2.0

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-716317.html

Summary

SINEC Traffic Analyzer before V2.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

12.08.2024

US CERT

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Title

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Published

Aug. 12, 2024, 7:38 p.m.

URL

https://www.cisa.gov/news-events/alerts/2024/08/13/cisa-adds-six-known-exploited-vulnerabilities-catalog

Summary

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege ...

08.08.2024

Dorsett Controls InfoScan

Title

Dorsett Controls InfoScan

Published

Aug. 8, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dorsett Controls Equipment: InfoScan Vulnerabilities: Exposure of Sensitive Information To An Unauthorized Actor, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and ...

07.08.2024

BOSCH PSIRT

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Title

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Published

Aug. 7, 2024, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-587194-bt.html

Summary

BOSCH-SA-587194-BT: DIVAR IP System Manager is a central user interface that provides an easy system setup, configuration and application software upgrades through an easily accessible web-based application. Multiple Curl vulnerabilities in the Git for Windows component have been discovered in DIVAR IP System Manager versions prior to 2.3.2, affecting several ...

02.08.2024

US CERT

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Title

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Published

Aug. 2, 2024, 7:17 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a

Summary

EXECUTIVE SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is ...

02.08.2024

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Title

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Published

Aug. 2, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-857368.html

Summary

Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges. Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions still under maintenance and recommends countermeasures for products where fixes are not, or not ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07

AVTECH IP Camera

Title

AVTECH IP Camera

Published

Aug. 1, 2024, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: AVTECH SECURITY Corporation Equipment: IP camera Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the ...

Johnson Controls exacqVision Server Web Service

Title

Johnson Controls exacqVision Server Web Service

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Web Service Vulnerability: Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send an unauthorized request or access data from an untrusted domain. ...

Johnson Controls exacqVision Web Service

Title

Johnson Controls exacqVision Web Service

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable remotely Vendor: Johnson Controls, Inc. Equipment: exacqVision Web Service Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and gain access to sensitive information. 3. TECHNICAL ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-08

Vonets WiFi Bridges

Title

Vonets WiFi Bridges

Published

Aug. 1, 2024, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Vonets Equipment: VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000 Vulnerabilities: Use of Hard-coded Credentials, Improper Access Control, Path Traversal, Command Injection, Improper Check or Handling of Exceptional ...

Johnson Controls exacqVision Client and exacqVision Server

Title

Johnson Controls exacqVision Client and exacqVision Server

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.0 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Client, exacqVision Server key Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due ...

July 2024

25.07.2024

Positron Broadcast Signal Processor

Title

Positron Broadcast Signal Processor

Published

July 25, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Positron S.R.L Equipment: Broadcast Signal Processor TRA7005 Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access ...

24.07.2024

US CERT

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Title

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Published

July 24, 2024, 6:37 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a

Summary

Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: U.S. Cyber National Mission Force (CNMF) U.S. ...

23.07.2024

National Instruments LabVIEW

Title

National Instruments LabVIEW

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: LabVIEW Vulnerabilities: Out-of-Bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a local attacker to disclose information and execute arbitrary ...

23.07.2024

Hitachi Energy AFS/AFR Series Products

Title

Hitachi Energy AFS/AFR Series Products

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS650, AFS660, AFS665, AFS670, AFS675, AFS677, AFR677 Vulnerabilities: Type Confusion, Use After Free, Double Free, Observable Discrepancy 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service ...

23.07.2024

National Instruments IO Trace

Title

National Instruments IO Trace

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: IO Trace Vulnerability: Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following National Instruments I/O ...

22.07.2024

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Title

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Published

July 22, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-071402.html

Summary

Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: SICAM A8000 Device firmware CPCI85 for CP-8031/CP-8050 SICAM EGS Device firmware CPCI85 SICAM 8 Software Solution SICORE Siemens has released new firmware versions for the ...

22.07.2024