Bulletins | CERT@VDE

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08

ABB M2M Gateway

Title

ABB M2M Gateway

Published

April 15, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: M2M Gateway Vulnerabilities: Integer Overflow or Wraparound, Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), Unquoted Search Path or Element, Untrusted Search Path, Use After Free, Out-of-bounds Write, Buffer Copy without Checking Size of ...

Delta Electronics COMMGR

Title

Delta Electronics COMMGR

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-07

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: COMMGR Vulnerability: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for an attacker to remotely access the AS3000Simulator family in the COMMGR software ...

Lantronix Xport (Update A)

Title

Lantronix Xport (Update A)

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Lantronix Equipment: XPort Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations. 3. TECHNICAL ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

Lantronix Xport

Title

Lantronix Xport

Published

April 15, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Lantronix Equipment: Xport Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations. 3. TECHNICAL ...

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Title

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-03

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Growatt Cloud Applications

Title

Growatt Cloud Applications

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Growatt Equipment: Cloud Applications Vulnerabilities: Cross-site Scripting, Authorization Bypass Through User-Controlled Key, Insufficient Type Distinction, External Control of System or Configuration Setting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to compromise ...

Siemens Industrial Edge Device Kit

Title

Siemens Industrial Edge Device Kit

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-02

Summary

Mitsubishi Electric Europe B.V. smartRTU

Title

Mitsubishi Electric Europe B.V. smartRTU

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-09

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Europe B.V. Equipment: smartRTU Vulnerability: Missing Authentication for Critical Function, OS Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete ...

14.04.2025

SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime

Title

SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime

Published

April 14, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Summary

Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02

Siemens SIDIS Prime

Title

Siemens SIDIS Prime

Published

April 10, 2025, 2 p.m.

URL

Summary

Siemens License Server

Title

Siemens License Server

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-01

Summary

ABB Arctic Wireless Gateways

Title

ABB Arctic Wireless Gateways

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: Arctic Wireless Gateways Vulnerabilities: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Improper Privilege Management, Exposure of Sensitive Information to an Unauthorized Actor, Improper Limitation of a Pathname to a Restricted Directory ...

Siemens Insights Hub Private Cloud

Title

Siemens Insights Hub Private Cloud

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-05

Summary

Siemens Industrial Edge Devices

Title

Siemens Industrial Edge Devices

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-04

Summary

Siemens SENTRON 7KT PAC1260 Data Manager

Title

Siemens SENTRON 7KT PAC1260 Data Manager

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-06

Summary

SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime

Title

SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime

Published

April 10, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Summary

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Title

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-686975.html

Summary

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update (“2022.3 IPU – BIOS Advisory” Intel-SA-00688). Siemens has released new versions for several affected products and ...

SSA-698820 V1.6 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices

Title

SSA-698820 V1.6 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-698820.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-265688 V1.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP ...

Title

SSA-265688 V1.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices

Title

SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-725549.html

Summary

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through specially crafted ICMP packets. A successful attack will impact the availability ...

SSA-672923 V1.0: Out of Bounds Write Vulnerability in Solid Edge

Title

SSA-672923 V1.0: Out of Bounds Write Vulnerability in Solid Edge

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-672923.html

Summary

Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability ...

SSA-876787 V1.5 (Last Update: 2025-04-08): Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs

Title

SSA-876787 V1.5 (Last Update: 2025-04-08): Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-876787.html

Summary

Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitimate user must actively click on an attacker-crafted link. Siemens ...

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Title

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Summary

Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation. The ...

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Title

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-634640.html

Summary

Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...