March 2023
14.03.2023
SIEMENS CERT
SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge
Title
SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge
Published
March 14, 2023, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-491245.html
Summary
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP, SLDPRT and PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker ...
14.03.2023
SIEMENS CERT
SSA-476715 V1.1 (Last Update: 2023-03-14): Two Vulnerabilities in Automation License Manager
Title
SSA-476715 V1.1 (Last Update: 2023-03-14): Two Vulnerabilities in Automation License Manager
Published
March 14, 2023, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-476715.html
Summary
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation and remote code execution. The affected functionality is not available for remote attackers in the ...
13.03.2023
US CERT
Threat Actors Exploit Progress Telerik Vulnerability in...
Title
<a href="/news-events/cybersecurity-advisories/aa23-074a" hreflang="en">Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server</a>
Published
March 13, 2023, 6:57 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a
Summary
SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian executive branch (FCEB) agency. Analysts determined that multiple cyber threat actors, including an APT actor, were able to exploit a ...
13.03.2023
US CERT
Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
Title
Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
Published
March 13, 2023, 6:57 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a
Summary
SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian executive branch (FCEB) agency. Analysts determined that multiple cyber threat actors, including an advanced persistent threat (APT) actor, were able ...
13.03.2023
US CERT
Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server
Title
Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server
Published
March 13, 2023, 6:57 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a
Summary
SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian executive branch (FCEB) agency. Analysts determined that multiple cyber threat actors, including an APT actor, were able to exploit a ...
09.03.2023
US CERT (ICS)
B&R Systems Diagnostics Manager
Title
<a href="/news-events/ics-advisories/icsa-23-068-02" hreflang="en">B&amp;R Systems Diagnostics Manager</a>
Published
March 9, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-02
Summary
1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: B&R Industrial Automation Equipment: Systems Diagnostics Manager (SDM) Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code to exfiltrate data and perform any action within ...
09.03.2023
US CERT (ICS)
Hitachi Energy Relion 670, 650 and SAM600-IO Series
Title
<a href="/news-events/ics-advisories/icsa-23-068-05" hreflang="en">Hitachi Energy Relion 670, 650 and SAM600-IO Series</a>
Published
March 9, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-05
Summary
1. EXECUTIVE SUMMARY CVSS v3 4.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670, 650, and SAM600-IO Series Vulnerability: Insufficient Verification of Data Authenticity 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the Intelligent Electronic Device (IED) to restart, causing a temporary denial-of-service condition. 3. ...
09.03.2023
US CERT (ICS)
ABB Ability Symphony Plus
Title
<a href="/news-events/ics-advisories/icsa-23-068-03" hreflang="en">ABB Ability Symphony Plus</a>
Published
March 9, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-03
Summary
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: ABB Equipment: Ability Symphony Plus Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized client to connect to the S+ Operations servers (human machine interface (HMI) network), to act as a legitimate S+ ...
09.03.2023
US CERT (ICS)
Step Tools Third-Party
Title
<a href="/news-events/ics-advisories/icsa-23-068-04" hreflang="en">Step Tools Third-Party</a>
Published
March 9, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-04
Summary
1. EXECUTIVE SUMMARY CVSS v3 2.2 ATTENTION: Low attack complexity Vendor: Step Tools, Inc Equipment: STEPTools ifcmesh library Vulnerability: Null Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a specially constructed file. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS ...
09.03.2023
US CERT (ICS)
Akuvox E11
Title
<a href="/news-events/ics-advisories/icsa-23-068-01" hreflang="en">Akuvox E11</a>
Published
March 9, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01
Summary
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Akuvox Equipment: E11 Vulnerabilities: Generation of Predictable IV with CBC, User of Hard-coded Cryptographic Key, Missing Authentication for Critical Function, Storing Passwords in a Recoverable Format, Weak Password Recovery Mechanism for Forgotten Password, Command Injection, Reliance on File ...
02.03.2023
US CERT (ICS)
Rittal CMC III Access systems
Title
<a href="/news-events/ics-advisories/icsa-23-061-03" hreflang="en">Rittal CMC III Access systems</a>
Published
March 2, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-03
Summary
02.03.2023
US CERT (ICS)
Mitsubishi Electric MELSEC iQ-F Series
Title
<a href="/news-events/ics-advisories/icsa-23-061-01" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series</a>
Published
March 2, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01
Summary
02.03.2023
US CERT (ICS)
Baicells Nova
Title
<a href="/news-events/ics-advisories/icsa-23-061-02" hreflang="en">Baicells Nova</a>
Published
March 2, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-02
Summary
February 2023
28.02.2023
US CERT (ICS)
Hitachi Energy Gateway Station
Title
<a href="/news-events/ics-advisories/icsa-23-059-02" hreflang="en">Hitachi Energy Gateway Station</a>
Published
Feb. 28, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-02
Summary
28.02.2023
US CERT (ICS)
Hitachi Energy Gateway Station
Title
<a href="/news-events/ics-advisories/icsa-23-059-01" hreflang="en">Hitachi Energy Gateway Station</a>
Published
Feb. 28, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-01
Summary
28.02.2023
US CERT (ICS)
Mitsubishi Electric MELSEC iQ-F Series (Update B)
Title
<a href="/news-events/ics-advisories/icsa-22-139-01-0" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series (Update B)</a>
Published
Feb. 28, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-22-139-01-0
Summary
24.02.2023
US CERT
CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks
Title
CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks
Published
Feb. 24, 2023, 8:04 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a
Summary
SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this Cybersecurity Advisory (CSA) detailing activity and key findings from a recent CISA red team assessment—in coordination with the assessed organization—to provide network defenders recommendations for improving their organization's cyber posture. Actions to take today to harden your local environment: ...
24.02.2023
US CERT
CISA Red Team Shares Key Findings to Improve Monitoring...
Title
<a href="/news-events/cybersecurity-advisories/aa23-059a" hreflang="en">CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks</a>
Published
Feb. 24, 2023, 8:04 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a
Summary
24.02.2023
US CERT
#StopRansomware: Royal Ransomware
Title
#StopRansomware: Royal Ransomware
Published
Feb. 24, 2023, 6:30 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a
Summary
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...
24.02.2023
US CERT
#StopRansomware: Royal Ransomware
Title
<a href="/news-events/cybersecurity-advisories/aa23-061a" hreflang="en">#StopRansomware: Royal Ransomware</a>
Published
Feb. 24, 2023, 6:30 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a
Summary
23.02.2023
US CERT (ICS)
PTC ThingWorx Edge
Title
PTC ThingWorx Edge
Published
Feb. 23, 2023, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-23-054-01
Summary
23.02.2023
US CERT (ICS)
Moxa UC Series (Update A)
Title
Moxa UC Series (Update A)
Published
Feb. 23, 2023, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-333-04
Summary
23.02.2023
US CERT (ICS)
BD Alaris Infusion Central (Update A)
Title
BD Alaris Infusion Central (Update A)
Published
Feb. 23, 2023, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsma-23-047-01
Summary
23.02.2023
US CERT (ICS)
PTC ThingWorx Edge
Title
<a href="/news-events/ics-advisories/icsa-23-054-01" hreflang="en">PTC ThingWorx Edge</a>
Published
Feb. 23, 2023, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-23-054-01
Summary
21.02.2023
US CERT (ICS)
Philips Vue PACS (Update C)
Title
Philips Vue PACS (Update C)
Published
Feb. 21, 2023, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsma-21-187-01
Summary
This updated advisory is a follow-up to the advisory update titled ICSMA-21-87-01 Philips Vue PACS (Update A) that was published January 20, 2022, to the ICS webpage on www.cisa.gov/uscert/ics. This advisory contains mitigations for numerous vulnerabilities in Philips Vue PACS products.

Last Updates

BOSCH PSIRT
15.01.2025
SIEMENS CERT
17.04.2025
US CERT
01.04.2025
US CERT (ICS)
17.04.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds