Bulletins | CERT@VDE

ThreatQuotient ThreatQ Platform

Title

ThreatQuotient ThreatQ Platform

Published

Dec. 17, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: ThreatQuotient Inc. Equipment: ThreatQ Platform Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ThreatQuotient ...

16.12.2024

SSA-928984 V1.0: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Title

SSA-928984 V1.0: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Published

Dec. 16, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-928984.html

Summary

Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for ...

Siemens Teamcenter Visualization

Title

Siemens Teamcenter Visualization

Published

Dec. 12, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-09

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY CVSS ...

Siemens Solid Edge SE2024

Title

Siemens Solid Edge SE2024

Published

Dec. 12, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-07

Summary

Siemens CPCI85 Central Processing/Communication

Title

Siemens CPCI85 Central Processing/Communication

Published

Dec. 12, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-01

Summary

Siemens SENTRON Powercenter 1000

Title

Siemens SENTRON Powercenter 1000

Published

Dec. 12, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-10

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

SSA-097435 V1.7 (Last Update: 2024-12-12): Usernames Disclosure Vulnerability in Mendix Runtime

Title

SSA-097435 V1.7 (Last Update: 2024-12-12): Usernames Disclosure Vulnerability in Mendix Runtime

Published

Dec. 12, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-097435.html

Summary

Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames. Siemens has released new versions for the affected products and recommends to update to the latest versions. Note that some, Mendix Runtime version lines ...

SSA-979056 V1.1 (Last Update: 2024-12-12): Out of Bounds Write Vulnerability in Parasolid

Title

SSA-979056 V1.1 (Last Update: 2024-12-12): Out of Bounds Write Vulnerability in Parasolid

Published

Dec. 12, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-979056.html

Summary

Parasolid is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to ...

Rockwell Automation Arena (Update A)

Title

Rockwell Automation Arena (Update A)

Published

Dec. 10, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-06

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: Arena Vulnerabilities: Use After Free, Out-of-bounds Write, Improper Initialization, Out-of-bounds Read, Dependency on Vulnerable Third-Party Component 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in execution of arbitrary code. 3. TECHNICAL DETAILS ...

MOBATIME Network Master Clock

Title

MOBATIME Network Master Clock

Published

Dec. 10, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: MOBATIME Equipment: Network Master Clock - DTS 4801 Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to take control of the operating system for this product. 3. ...

Schneider Electric FoxRTU Station

Title

Schneider Electric FoxRTU Station

Published

Dec. 10, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low Attack Complexity Vendor: Schneider Electric Equipment: FoxRTU Station Vulnerability: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code execution. 3. TECHNICAL DETAILS ...

Schneider Electric EcoStruxure Foxboro DCS Core Control Services

Title

Schneider Electric EcoStruxure Foxboro DCS Core Control Services

Published

Dec. 10, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low Attack Complexity Vendor: Schneider Electric Equipment: EcoStruxure Foxboro DCS Core Control Services Vulnerabilities: Out-of-bounds Write, Improper Validation of Array Index, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to a loss of system functionality or ...

SSA-981975 V1.4 (Last Update: 2024-12-10): Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATI...

Title

SSA-981975 V1.4 (Last Update: 2024-12-10): Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATIC IPCs

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-981975.html

Summary

Several Intel-CPU based SIMATIC IPCs are affected by an information exposure vulnerability (CVE-2022-40982) in the CPU that could allow an authenticated local user to potentially read other users’ data [1]. The issue is also known as “Gather Data Sampling” (GDS) or Downfall Attacks. For details refer to the chapter “Additional ...

SSA-979056 V1.0: Out of Bounds Write Vulnerability in Parasolid

Title

SSA-979056 V1.0: Out of Bounds Write Vulnerability in Parasolid

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-979056.html

Summary

Parasolid is affected by out of bounds write vulnerability that could be triggered when the application reads files in PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker could perform remote code execution in the context of the current process. Siemens ...

SSA-711309 V2.2 (Last Update: 2024-12-10): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

Title

SSA-711309 V2.2 (Last Update: 2024-12-10): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-711309.html

Summary

The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. Siemens has released new versions for several affected products and ...

SSA-701627 V1.0: XXE Injection Vulnerabilities in COMOS

Title

SSA-701627 V1.0: XXE Injection Vulnerabilities in COMOS

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-701627.html

Summary

COMOS is affected by XXE injection vulnerabilities that could allow an attacker to extract arbitrary application files. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-822518 V1.2 (Last Update: 2024-12-10): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGED...

Title

SSA-822518 V1.2 (Last Update: 2024-12-10): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-822518.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-800126 V1.0: Deserialization Vulnerability in Siemens Engineering Platforms before V20

Title

SSA-800126 V1.0: Deserialization Vulnerability in Siemens Engineering Platforms before V20

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-800126.html

Summary

Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. Siemens has released ...

SSA-723487 V1.3 (Last Update: 2024-12-10): RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE,...

Title

SSA-723487 V1.3 (Last Update: 2024-12-10): RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-723487.html

Summary

This advisory documents the impact of CVE-2024-3596 (also dubbed “Blastradius”), a vulnerability in the RADIUS protocol, to SCALANCE, RUGGEDCOM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RADIUS client, e.g., SCALANCE or RUGGEDCOM devices) and a RADIUS server (e.g., SINEC INS), to ...

SSA-673996 V1.1 (Last Update: 2024-12-10): Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products

Title

SSA-673996 V1.1 (Last Update: 2024-12-10): Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-673996.html

Summary

Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messages. Affected SICAM and SITIPE products: SICAM A8000 Device firmware ET85 for CP-8000/CP-8021/CP-8022 ...

SSA-698820 V1.4 (Last Update: 2024-12-10): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices

Title

SSA-698820 V1.4 (Last Update: 2024-12-10): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-698820.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-773256 V1.2 (Last Update: 2024-12-10): Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products

Title

SSA-773256 V1.2 (Last Update: 2024-12-10): Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-773256.html

Summary

A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process allowing a remote attacker to cause Denial-of-Service condition in the affected products. Siemens has released new versions for several affected ...

SSA-645131 V1.0: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization

Title

SSA-645131 V1.0: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-645131.html

Summary

Siemens Teamcenter Visualization contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. ...

SSA-730188 V1.0: Multiple File Parsing Vulnerabilities in Solid Edge V2024

Title

SSA-730188 V1.0: Multiple File Parsing Vulnerabilities in Solid Edge V2024

Published

Dec. 10, 2024, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-730188.html

Summary

Siemens Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious PAR or ASM files. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or potentially lead to arbitrary code ...