November 2022
29.11.2022
US CERT (ICS)
Mitsubishi Electric MELSEC and MELIPC Series (Update E)
Title
Mitsubishi Electric MELSEC and MELIPC Series (Update E)
Published
Nov. 29, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02 external link
Summary
29.11.2022
US CERT (ICS)
Omron PLC CJ and CS Series (Update A)
Title
Omron PLC CJ and CS Series (Update A)
Published
Nov. 29, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-19-346-02 external link
Summary
This advisory includes information and mitigation recommendations for authentications vulnerabilities reported in the Omron PLC CJ and CS Series.
22.11.2022
US CERT (ICS)
AVEVA Edge
Title
AVEVA Edge
Published
Nov. 22, 2022, 4:35 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-01 external link
Summary
22.11.2022
US CERT (ICS)
Digital Alert Systems DASDEC
Title
Digital Alert Systems DASDEC
Published
Nov. 22, 2022, 4:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-02 external link
Summary
22.11.2022
US CERT (ICS)
Phoenix Contact Automation Worx
Title
Phoenix Contact Automation Worx
Published
Nov. 22, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-03 external link
Summary
22.11.2022
US CERT (ICS)
GE CIMPLICITY
Title
GE CIMPLICITY
Published
Nov. 22, 2022, 4:20 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-04 external link
Summary
22.11.2022
US CERT (ICS)
Moxa Multiple ARM-Based Computers
Title
Moxa Multiple ARM-Based Computers
Published
Nov. 22, 2022, 4:15 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-326-05 external link
Summary
22.11.2022
US CERT (ICS)
Mitsubishi Electric FA Engineering Software Products (Update G)
Title
Mitsubishi Electric FA Engineering Software Products (Update G)
Published
Nov. 22, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02 external link
Summary
22.11.2022
US CERT (ICS)
Mitsubishi Electric Factory Automation Engineering Products (Update I)
Title
Mitsubishi Electric Factory Automation Engineering Products (Update I)
Published
Nov. 22, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-04 external link
Summary
22.11.2022
US CERT (ICS)
Hillrom Medical Device Management (Update C)
Title
Hillrom Medical Device Management (Update C)
Published
Nov. 22, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsma-21-152-01 external link
Summary
This updated advisory is a follow-up to the original advisory titled ICSMA-21-152-01 Hillrom Medical Device Management (Update B) that was published September 8, 2022, to the ICS webpage at cisa.gov/ics. This advisory contains mitigations for Out-of-bounds Write, Out-of-bounds Read vulnerabilities in Welch Allyn medical device management tools.
17.11.2022
US CERT
AA22-321A: #StopRansomware: Hive Ransomware
Title
AA22-321A: #StopRansomware: Hive Ransomware
Published
Nov. 17, 2022, 6 p.m.
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-321a external link
Summary
Original release date: November 17, 2022SummaryActions to Take Today to Mitigate Cyber Threats from Ransomware: • Prioritize remediating known exploited vulnerabilities. • Enable and enforce multifactor authentication with strong passwords • Close unused ports and remove any application not deemed necessary for day-to-day operations. Note: This joint Cybersecurity Advisory (CSA) ...
17.11.2022
US CERT (ICS)
Red Lion Crimson
Title
Red Lion Crimson
Published
Nov. 17, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-321-01 external link
Summary
17.11.2022
US CERT (ICS)
Cradlepoint IBR600
Title
Cradlepoint IBR600
Published
Nov. 17, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-321-02 external link
Summary
16.11.2022
US CERT
AA22-320A: Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
Title
AA22-320A: Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester
Published
Nov. 16, 2022, 4:04 p.m.
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-320a external link
Summary
Original release date: November 16, 2022SummaryFrom mid-June through mid-July 2022, CISA conducted an incident response engagement at a Federal Civilian Executive Branch (FCEB) organization where CISA observed suspected advanced persistent threat (APT) activity. In the course of incident response activities, CISA determined that cyber threat actors exploited the Log4Shell vulnerability ...
11.11.2022
US CERT (ICS)
Siemens SINEC Network Management System Logback Component
Title
Siemens SINEC Network Management System Logback Component
Published
Nov. 11, 2022, 5:25 a.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-03 external link
Summary
10.11.2022
US CERT (ICS)
Siemens Parasolid
Title
Siemens Parasolid
Published
Nov. 10, 2022, 5:35 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-01 external link
Summary
10.11.2022
US CERT (ICS)
Siemens Web Server Login Page of Industrial Controllers
Title
Siemens Web Server Login Page of Industrial Controllers
Published
Nov. 10, 2022, 5:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-02 external link
Summary
10.11.2022
US CERT (ICS)
Siemens SINUMERIK ONE and SINUMERIK MC
Title
Siemens SINUMERIK ONE and SINUMERIK MC
Published
Nov. 10, 2022, 5:20 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-04 external link
Summary
10.11.2022
US CERT (ICS)
Siemens QMS Automotive
Title
Siemens QMS Automotive
Published
Nov. 10, 2022, 5:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-06 external link
Summary
10.11.2022
US CERT (ICS)
Omron NJ/NX-series Machine Automation Controllers
Title
Omron NJ/NX-series Machine Automation Controllers
Published
Nov. 10, 2022, 5:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-07 external link
Summary
10.11.2022
US CERT (ICS)
Omron NJNX-series
Title
Omron NJNX-series
Published
Nov. 10, 2022, 5 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-08 external link
Summary
10.11.2022
US CERT (ICS)
Siemens Teamcenter Visualization and JT2Go
Title
Siemens Teamcenter Visualization and JT2Go
Published
Nov. 10, 2022, 4:55 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-314-09 external link
Summary
08.11.2022
SIEMENS CERT
SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
Title
SSA-362164 V1.2 (Last Update: 2022-11-08): Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
Published
Nov. 8, 2022, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-362164.pdf external link
Summary
The networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) use Initial Sequence Numbers for TCP-Sessions that are predictable. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not available.
08.11.2022
SIEMENS CERT
SSA-120378 V1.0: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Title
SSA-120378 V1.0: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Published
Nov. 8, 2022, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-120378.pdf external link
Summary
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF file with the affected products, this could lead the application to ...
08.11.2022
SIEMENS CERT
SSA-501891 V1.1 (Last Update: 2022-11-08): Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
Title
SSA-501891 V1.1 (Last Update: 2022-11-08): Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
Published
Nov. 8, 2022, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-501891.pdf external link
Summary
There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and recommends to update to the latest versions.

Last Updates

BOSCH PSIRT
25.04.2025
SIEMENS CERT
17.04.2025
US CERT
01.04.2025
US CERT (ICS)
24.04.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds