Bulletins | CERT@VDE

SSA-114589 V1.3 (Last Update: 2022-05-10): Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Prod...

Title

SSA-114589 V1.3 (Last Update: 2022-05-10): Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf

Summary

Multiple vulnerabilities (also known as “NUCLEUS:13”) have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products listed below use affected versions of the Nucleus software and inherently contain these vulnerabilities. Siemens has released updates for several affected products and ...

SSA-560465 V1.2 (Last Update: 2022-05-10): DHCP Client Vulnerability in VxWorks-based Industrial Products

Title

SSA-560465 V1.2 (Last Update: 2022-05-10): DHCP Client Vulnerability in VxWorks-based Industrial Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf

Summary

Various industry products are affected by a DHCP client vulnerability in Wind River VxWorks, that could allow an attacker to cause a heap-based buffer overflow. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-244969 V1.4 (Last Update: 2022-05-10): OpenSSL Vulnerability in Industrial Products

Title

SSA-244969 V1.4 (Last Update: 2022-05-10): OpenSSL Vulnerability in Industrial Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-244969.pdf

Summary

OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1l and 1.0.2 < 1.0.2za that allows an attacker to cause a denial of service (DoS) or to disclose private memory content. Siemens has released updates for several affected products and recommends to update to ...

SSA-732250 V1.0: Libcurl Vulnerabilities in Industrial Devices

Title

SSA-732250 V1.0: Libcurl Vulnerabilities in Industrial Devices

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf

Summary

Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, or not ...

SSA-626968 V1.0: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices

Title

SSA-626968 V1.0: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-626968.pdf

Summary

Desigo PXC3, PXC4, PXC5 and DXR2 devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial of service condition, or perform remote code execution. Siemens has released updates for the affected products and recommends to update ...

SSA-162506 V1.3 (Last Update: 2022-05-10): DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PX...

Title

SSA-162506 V1.3 (Last Update: 2022-05-10): DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-162506.pdf

Summary

SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures ...

SSB-439005 V4.3 (Last Update: 2022-05-10): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSB-439005 V4.3 (Last Update: 2022-05-10): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf

Summary

SSA-736385 V1.0: Memory Corruption Vulnerability in OpenV2G

Title

SSA-736385 V1.0: Memory Corruption Vulnerability in OpenV2G

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-736385.pdf

Summary

The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.

SSA-629512 V1.4 (Last Update: 2022-05-10): Local Privilege Escalation Vulnerability in TIA Portal

Title

SSA-629512 V1.4 (Last Update: 2022-05-10): Local Privilege Escalation Vulnerability in TIA Portal

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdf

Summary

The latest updates for TIA Portal fix a vulnerability that could allow a local attacker to execute arbitrary code with SYSTEM privileges. Update: The previously provided fixes only correctly set the permissions on English Windows versions. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, ...

SSA-661247 V2.8 (Last Update: 2022-05-10): Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to...

Title

SSA-661247 V2.8 (Last Update: 2022-05-10): Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf

Summary

On 2021-12-09, a vulnerability in Apache Log4j (a logging tool used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and is also known as “Log4Shell”. On 2021-12-14 an additional denial of service vulnerability (CVE-2021-45046) ...

SSA-678983 V1.4 (Last Update: 2022-05-10): Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)

Title

SSA-678983 V1.4 (Last Update: 2022-05-10): Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-678983.pdf

Summary

Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens IPC related products, that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: “Intel CSME, SPS, TXE, AMT and DAL Advisory” Intel-SA-00391 is represented by CVE-2020-8745 ...

SSA-756638 V1.1 (Last Update: 2022-05-10): Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RT...

Title

SSA-756638 V1.1 (Last Update: 2022-05-10): Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf

Summary

Devices of the LOGO! CMR family and the SIMATIC RTU 3000 family are affected by several vulnerabilities in the third party component Mbed TLS. They could allow an attacker with access to any of the interfaces of an affected device to impact the availability or to communicate with invalid certificates. ...

SSA-772220 V1.9 (Last Update: 2022-05-10): OpenSSL Vulnerabilities in Industrial Products

Title

SSA-772220 V1.9 (Last Update: 2022-05-10): OpenSSL Vulnerabilities in Industrial Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf

Summary

OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent . Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-787292 V1.2 (Last Update: 2022-05-10): Denial of Service Vulnerability in SIMATIC RFID Readers

Title

SSA-787292 V1.2 (Last Update: 2022-05-10): Denial of Service Vulnerability in SIMATIC RFID Readers

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-787292.pdf

Summary

The latest updates for SIMATIC RF products fix a vulnerability that could allow an unauthorized attacker to crash the OPC UA service of the affected devices. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-840188 V1.4 (Last Update: 2022-05-10): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Title

SSA-840188 V1.4 (Last Update: 2022-05-10): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-840188.pdf

Summary

Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow local or remote attackers to escalate privileges and read, write or delete critical files. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures ...

SSA-914168 V1.2 (Last Update: 2022-05-10): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Title

SSA-914168 V1.2 (Last Update: 2022-05-10): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf

Summary

Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products ...

SSA-789162 V1.0: Vulnerabilities in Teamcenter

Title

SSA-789162 V1.0: Vulnerabilities in Teamcenter

Published

May 10, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf

Summary

Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures ...

03.05.2022

US CERT (ICS)

Yokogawa CENTUM and ProSafe-RS

Title

Yokogawa CENTUM and ProSafe-RS

Published

May 3, 2022, 4 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-123-01

Summary

This advisory contains mitigations for a OS Command Injection, Improper Authentication, NULL Pointer Dereference, Improper Input Validation, Resource Management Errors vulnerabilities in Yokogawa CENTUM and ProSafe-RS Distributed Control System and Safety Instrumented System products.

02.05.2022

BOSCH PSIRT

Vulnerabilities in the communication protocol of the PLC runtime

Title

Vulnerabilities in the communication protocol of the PLC runtime

Published

May 2, 2022, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-577411.html

Summary

BOSCH-SA-577411: The PLC application of the control systems ctrlX CORE, IndraLogic, IndraMotion MTX, IndraMotion MLC and IndraMotion MLD contains PLC technology from CODESYS GmbH. The manufacturer CODESYS GmbH published multiple security bulletins \[1\], \[2\], \[3\], \[4\], \[5\]. By exploiting the vulnerabilities in the protocol for the communication between the PLC ...

April 2022

AA22-117A: 2021 Top Routinely Exploited Vulnerabilities

US CERT

Title

AA22-117A: 2021 Top Routinely Exploited Vulnerabilities

Published

April 27, 2022, 4 p.m.

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-117a

Summary

Original release date: April 27, 2022SummaryThis joint Cybersecurity Advisory (CSA) was coauthored by cybersecurity authorities of the United States, Australia, Canada, New Zealand, and the United Kingdom: the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Australian Cyber Security Centre (ACSC), Canadian Centre ...

Improper Control of Generation of Code in Bosch MATRIX

BOSCH PSIRT

Title

Improper Control of Generation of Code in Bosch MATRIX

Published

April 27, 2022, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-309239-bt.html

Summary

BOSCH-SA-309239-BT: The access control and time attendance management software Bosch MATRIX uses a version of the Java Spring Framework that is vulnerable to \"spring4shell\" (CVE-2022-22965). Bosch MATRIX does NOT use a configuration that is currently known to be exploitable using this vulnerability, but as the developers of Spring point out, ...

SSA-254054 V1.1 (Last Update: 2022-04-27): Spring Framework Vulnerability (Spring4Shell or SpringShell, CVE-2022-22965) - Impac...

Title

SSA-254054 V1.1 (Last Update: 2022-04-27): Spring Framework Vulnerability (Spring4Shell or SpringShell, CVE-2022-22965) - Impact to Siemens Products

Published

April 27, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf

Summary

A vulnerability in Spring Framework was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2022-22965 and is also known as “Spring4Shell” or “SpringShell”. Siemens is currently investigating to determine which products are affected and is continuously updating this advisory as ...