Bulletins | CERT@VDE

SSA-603476 (Last Update: 2019-12-10): Web Vulnerabilities in SIMATIC CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs

Title

SSA-603476 (Last Update: 2019-12-10): Web Vulnerabilities in SIMATIC CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-603476.pdf

Summary

SIMATIC CP 343-1 Advanced/CP-443-1 Advanced devices and SIMATIC S7-300/S7-400 CPUs are affected by two vulnerabilities. One of the vulnerabilities could allow remote attackers to perform operations as an authenticated user under certain conditions. Siemens has released updates for SIMATIC CP 343-1 Advanced and SIMATIC CP 443-1 Advanced devices. Siemens recommends ...

SSA-686531 (Last Update: 2019-12-10): Hardware based manufacturing access on S7-1200 and S7-200 SMART

Title

SSA-686531 (Last Update: 2019-12-10): Hardware based manufacturing access on S7-1200 and S7-200 SMART

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf

Summary

There is an access mode used during manufacturing of SIMATIC S7-1200 and S7-200 SMART CPUs that allows additional diagnostic functionality. Using this functionality requires physical access to the UART interface during boot process. Siemens is working on a solution and recommends specific countermeasures until the solution is available.

SSA-462066 (Last Update: 2019-12-10): Vulnerability known as TCP SACK PANIC in Industrial Products

Title

SSA-462066 (Last Update: 2019-12-10): Vulnerability known as TCP SACK PANIC in Industrial Products

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Summary

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. Siemens has released updates for several affected products, and recommends that customers update to the new version. Siemens is preparing ...

SSA-189842 (Last Update: 2019-12-10): TCP URGENT/11 Vulnerabilities in RUGGEDCOM Win

Title

SSA-189842 (Last Update: 2019-12-10): TCP URGENT/11 Vulnerabilities in RUGGEDCOM Win

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Summary

RUGGEDCOM Win is affected by multiple security vulnerabilities. These vulnerabilities could allow an attacker to leverage various attacks, e.g. to execute arbitrary code over the network. The vulnerabilities affect the underlying Wind River VxWorks network stack and were recently patched by Wind River. Siemens is working on updates for the ...

SSA-525454 (Last Update: 2019-12-10): Vulnerabilities in XHQ Operations Intelligence

Title

SSA-525454 (Last Update: 2019-12-10): Vulnerabilities in XHQ Operations Intelligence

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-525454.pdf

Summary

Multiple vulnerabilities have been identified in XHQ Operations Intelligence product line. These vulnerabilities could allow for data injection in XHQ's web interfaces. Siemens recommends to update XHQ Operations Intelligence product line to the newest version.

SSA-170686 (Last Update: 2019-12-10): Vulnerabilities in SCALANCE X-200 and X-200IRT Switch Families

Title

SSA-170686 (Last Update: 2019-12-10): Vulnerabilities in SCALANCE X-200 and X-200IRT Switch Families

Published

Dec. 10, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-170686.pdf

Summary

Two vulnerabilities have been reported for the Siemens SCALANCE X-200 and X-200IRT switch families concerning a privilege escalation bug in the web interface and an authentication problem in the SNMPv3 implementation. Siemens has addressed both vulnerabilities by firmware upgrades.

November 2019

Siemens SINAMICS (Update A)

Title

Siemens SINAMICS (Update A)

Published

Nov. 12, 2019, 4 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-227-04

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-227-04 Siemens SINAMICS that was published August 15, 2019, on the ICS webpage on us-cert.gov. This updated advisory includes mitigations for a uncontrolled resource consumption vulnerability reported in Siemens SINAMICS products.

SSA-686531 (Last Update: 2019-11-12): Hardware based manufacturing access on S7-1200

Title

SSA-686531 (Last Update: 2019-11-12): Hardware based manufacturing access on S7-1200

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-686531.pdf

Summary

There is an access mode used during manufacturing of S7-1200 CPUs that allows additional diagnostic functionality. Using this functionality requires physical access to the UART interface during boot process. Siemens is working on a solution and recommends specific countermeasures until the solution is available.

SSB-439005 (Last Update: 2019-11-12): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-...

Title

SSB-439005 (Last Update: 2019-11-12): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf

Summary

SSA-898181 (Last Update: 2019-11-12): Desigo PX Web Remote Denial of Service Vulnerability

Title

SSA-898181 (Last Update: 2019-11-12): Desigo PX Web Remote Denial of Service Vulnerability

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-898181.pdf

Summary

The latest update for Desigo PXC devices fixes a vulnerability that could allow unauthenticated remote users to cause a denial of service condition on the PX Web interface (HTTP, port tcp/80) of a device. Devices where PX Web is not enabled are not affected by this vulnerability.

SSA-434032 (Last Update: 2019-11-12): Vulnerability in Mentor Nucleus Networking Module

Title

SSA-434032 (Last Update: 2019-11-12): Vulnerability in Mentor Nucleus Networking Module

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-434032.pdf

Summary

Mentor Nucleus by Mentor, a Siemens Business, is affected by one vulnerability. This vulnerability could allow an attacker to affect the integrity and availability of the device.

SSA-462066 (Last Update: 2019-11-12): Vulnerability known as TCP SACK PANIC in Industrial Products

Title

SSA-462066 (Last Update: 2019-11-12): Vulnerability known as TCP SACK PANIC in Industrial Products

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Summary

SSA-530931 (Last Update: 2019-11-12): Denial-of-Service in Webserver of Industrial Products

Title

SSA-530931 (Last Update: 2019-11-12): Denial-of-Service in Webserver of Industrial Products

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-530931.pdf

Summary

A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released updates for several affected products, and recommends that customers update to the new version. Siemens is preparing further updates and recommends ...

SSA-473245 (Last Update: 2019-11-12): Denial-of-Service Vulnerability in Profinet Devices

Title

SSA-473245 (Last Update: 2019-11-12): Denial-of-Service Vulnerability in Profinet Devices

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-473245.pdf

Summary

A vulnerability in affected devices could allow an attacker to perform a denial-of-service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released updates for several affected products, and recommends that customers update to the new version. Siemens is preparing further updates ...

SSA-616472 (Last Update: 2019-11-12): ZombieLoad and Microarchitectural Data Sampling Vulnerabilities in Industrial Products

Title

SSA-616472 (Last Update: 2019-11-12): ZombieLoad and Microarchitectural Data Sampling Vulnerabilities in Industrial Products

Published

Nov. 12, 2019, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdf

Summary

Security researchers published information on vulnerabilities known as ZombieLoad and Microarchitectural Data Sampling (MDS). These vulnerabilities affect many modern processors from different vendors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerabilities.

08.11.2019

Philips Tasy EMR (Update A)

Title

Philips Tasy EMR (Update A)

Published

Nov. 8, 2019, 4 a.m.

URL

https://www.us-cert.gov/ics/advisories/ICSMA-19-120-01

Summary

This updated advisory is a follow-up to the original advisory titled ICSMA-19-120-01 Philips Tasy EMR that was published April 30, 2019, on the ICS webpage on us-cert.gov. This medical advisory includes mitigations for a cross-site scripting vulnerability reported in Philips' Tasy EMR, a clinical and administrative workflow-based information system.

07.11.2019

Medtronic Valleylab FT10 and LS10

Title

Medtronic Valleylab FT10 and LS10

Published

Nov. 7, 2019, 4:20 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsma-19-311-01

Summary

This medical advisory contains mitigations for improper authentication and protection mechanism failure vulnerabilities in Medtronic’s Valleylab FT10 and LS10 energy and electrosurgery products.

07.11.2019

Medtronic Valleylab FT10 and FX8

Title

Medtronic Valleylab FT10 and FX8

Published

Nov. 7, 2019, 4:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsma-19-311-02

Summary

This medical advisory contains mitigations for use of hard-coded credentials, reversible one-way hash, and improper input validation vulnerabilities in Medtronic’s Valleylab FT10 and FX8 products.

07.11.2019

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules

Title

Mitsubishi Electric MELSEC-Q Series and MELSEC-L Series CPU Modules

Published

Nov. 7, 2019, 4:10 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-311-01

Summary

This advisory contains mitigations for an uncontrolled resource consumption vulnerability in select Mitsubishi Electric's CPU modules.

05.11.2019

Omron Network Configurator for DeviceNet (Update A)

Title

Omron Network Configurator for DeviceNet (Update A)

Published

Nov. 5, 2019, 4 p.m.

URL

https://www.us-cert.gov/ics/advisories/ICSA-19-134-01

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-134-01 Omron Network Configurator for DeviceNet that was published May 14, 2019, on the ICS webpage on us-cert.gov. This updated advisory includes mitigations for an untrusted search path vulnerability reported in Omron's Network Configurator for DeviceNet application.

October 2019

31.10.2019

Advantech WISE-PaaS/RMM

Title

Advantech WISE-PaaS/RMM

Published

Oct. 31, 2019, 3:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-304-01

Summary

This advisory contains mitigations for path traversal, missing authorization, improper restriction of XML external entity reference, and SQL injection vulnerabilities in Advantech’s WISE-PaaS/RMM IoT device remote monitoring and management platform.

31.10.2019

Honeywell equIP Series IP Cameras

Title

Honeywell equIP Series IP Cameras

Published

Oct. 31, 2019, 3:10 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-304-02

Summary

This advisory contains mitigations for an improper input validation vulnerability in Honeywell's equIP series IP cameras.

25.10.2019

Moxa IKS, EDS (Update A)

Title

Moxa IKS, EDS (Update A)

Published

Oct. 25, 2019, 4 a.m.

URL

https://www.us-cert.gov/ics/advisories/ICSA-19-057-01

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-057-01 Moxa IKS, EDS that was published February 26, 2019, on the ICS webpage on us-cert.gov. This updated advisory includes mitigations for classic buffer overflow, cross-site request forgery, cross-site scripting, improper access controls, improper restriction of excessive authentication attempts, ...

24.10.2019

Philips IntelliSpace Perinatal

Title

Philips IntelliSpace Perinatal

Published

Oct. 24, 2019, 4:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsma-19-297-01

Summary

This medical advisory contains mitigations for an exposure of resource to wrong sphere vulnerability in Philips’ IntelliSpace Perinatal obstetrics information management system.

24.10.2019