Bulletins | CERT@VDE

SSA-722010 V1.1 (Last Update: 2024-08-13): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Title

SSA-722010 V1.1 (Last Update: 2024-08-13): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-722010.html

Summary

Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds read vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens ...

SSA-720392 V1.0: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4

Title

SSA-720392 V1.0: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-720392.html

Summary

Location Intelligence before V4.4 is affected by multiple vulnerabilities that could allow an attacker in an on-path position to read and modify data passed over the connection between legitimate clients and the affected product or brute force user passwords. Siemens has released a new version for Location Intelligence family and ...

SSA-640968 V1.2 (Last Update: 2024-08-13): Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Mult...

Title

SSA-640968 V1.2 (Last Update: 2024-08-13): Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-640968.html

Summary

TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has released updates for several affected products and recommends to update to the ...

SSA-116924 V1.2 (Last Update: 2024-08-13): Path Traversal Vulnerability in TIA Portal

Title

SSA-116924 V1.2 (Last Update: 2024-08-13): Path Traversal Vulnerability in TIA Portal

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-116924.html

Summary

TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution. Siemens has released new versions ...

SSA-068047 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2

Title

SSA-068047 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-068047.html

Summary

SCALANCE M-800 family before V7.2.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-784301 V1.0: Multiple Vulnerabilities in SINEC NMS Before V3.0

Title

SSA-784301 V1.0: Multiple Vulnerabilities in SINEC NMS Before V3.0

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-784301.html

Summary

SINEC NMS before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version.

SSA-698820 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Title

SSA-698820 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-698820.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-686975 V1.5 (Last Update: 2024-08-13): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Title

SSA-686975 V1.5 (Last Update: 2024-08-13): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-686975.html

Summary

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update (“2022.3 IPU – BIOS Advisory” Intel-SA-00688). Siemens is preparing updates and recommends specific countermeasures for products ...

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSA-398330 V1.8 (Last Update: 2024-08-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

SSA-625850 V1.1 (Last Update: 2024-08-13): Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Fami...

Title

SSA-625850 V1.1 (Last Update: 2024-08-13): Multiple WIBU Systems CodeMeter Vulnerabilities Affecting the Desigo CC Product Family and SENTRON powermanager

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-625850.html

Summary

Versions V5.0 through V7 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON powermanager, are affected by multiple vulnerabilities in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of these vulnerabilities could allow remote ...

SSA-407785 V1.3 (Last Update: 2024-08-13): Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization

Title

SSA-407785 V1.3 (Last Update: 2024-08-13): Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-407785.html

Summary

Parasolid and Teamcenter Visualization are affected by memory corruption vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution or denial of ...

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Title

SSA-659443 V1.0: Local Code Execution Vulnerabilities in COMOS Before V10.5

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-659443.html

Summary

COMOS before V10.5 is affected by two local code execution vulnerabilities in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Title

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-357412.html

Summary

NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on ...

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Title

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-180704.html

Summary

SCALANCE M-800 family before V8.0 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

12.08.2024

US CERT

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Title

CISA Adds Six Known Exploited Vulnerabilities to Catalog

Published

Aug. 12, 2024, 7:38 p.m.

URL

https://www.cisa.gov/news-events/alerts/2024/08/13/cisa-adds-six-known-exploited-vulnerabilities-catalog

Summary

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege ...

08.08.2024

Dorsett Controls InfoScan

Title

Dorsett Controls InfoScan

Published

Aug. 8, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-221-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dorsett Controls Equipment: InfoScan Vulnerabilities: Exposure of Sensitive Information To An Unauthorized Actor, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to expose sensitive information, resulting in data theft and ...

07.08.2024

BOSCH PSIRT

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Title

Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices

Published

Aug. 7, 2024, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-587194-bt.html

Summary

BOSCH-SA-587194-BT: DIVAR IP System Manager is a central user interface that provides an easy system setup, configuration and application software upgrades through an easily accessible web-based application. Multiple Curl vulnerabilities in the Git for Windows component have been discovered in DIVAR IP System Manager versions prior to 2.3.2, affecting several ...

02.08.2024

US CERT

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Title

Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Published

Aug. 2, 2024, 7:17 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a

Summary

EXECUTIVE SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is ...

02.08.2024

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Title

SSA-857368 V1.0: Multiple Vulnerabilities in Omnivise T3000

Published

Aug. 2, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-857368.html

Summary

Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges. Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions still under maintenance and recommends countermeasures for products where fixes are not, or not ...

Johnson Controls exacqVision Web Service

Title

Johnson Controls exacqVision Web Service

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.4 ATTENTION: Exploitable remotely Vendor: Johnson Controls, Inc. Equipment: exacqVision Web Service Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and gain access to sensitive information. 3. TECHNICAL ...

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-07

AVTECH IP Camera

Title

AVTECH IP Camera

Published

Aug. 1, 2024, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: AVTECH SECURITY Corporation Equipment: IP camera Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to inject and execute commands as the owner of the ...

Johnson Controls exacqVision Client and exacqVision Server

Title

Johnson Controls exacqVision Client and exacqVision Server

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.0 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Client, exacqVision Server key Vulnerability: Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due ...

Johnson Controls exacqVision Server Web Service

Title

Johnson Controls exacqVision Server Web Service

Published

Aug. 1, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-214-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.6 ATTENTION: Exploitable remotely Vendor: Johnson Controls Inc. Equipment: exacqVision Web Service Vulnerability: Permissive Cross-domain Policy with Untrusted Domains 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send an unauthorized request or access data from an untrusted domain. ...