Bulletins | CERT@VDE

Advantech WISE-PaaS/RMM

Title

Advantech WISE-PaaS/RMM

Published

Oct. 31, 2019, 3:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-304-01

Summary

This advisory contains mitigations for path traversal, missing authorization, improper restriction of XML external entity reference, and SQL injection vulnerabilities in Advantech’s WISE-PaaS/RMM IoT device remote monitoring and management platform.

15:10

Honeywell equIP Series IP Cameras

Title

Honeywell equIP Series IP Cameras

Published

Oct. 31, 2019, 3:10 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-304-02

Summary

This advisory contains mitigations for an improper input validation vulnerability in Honeywell's equIP series IP cameras.

Friday, 25.10.2019

04:00

Moxa IKS, EDS (Update A)

Title

Moxa IKS, EDS (Update A)

Published

Oct. 25, 2019, 4 a.m.

URL

https://www.us-cert.gov/ics/advisories/ICSA-19-057-01

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-057-01 Moxa IKS, EDS that was published February 26, 2019, on the ICS webpage on us-cert.gov. This updated advisory includes mitigations for classic buffer overflow, cross-site request forgery, cross-site scripting, improper access controls, improper restriction of excessive authentication attempts, ...

Thursday, 24.10.2019

16:15

Philips IntelliSpace Perinatal

Title

Philips IntelliSpace Perinatal

Published

Oct. 24, 2019, 4:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsma-19-297-01

Summary

This medical advisory contains mitigations for an exposure of resource to wrong sphere vulnerability in Philips’ IntelliSpace Perinatal obstetrics information management system.

16:10

Rittal Chiller SK 3232-Series

Title

Rittal Chiller SK 3232-Series

Published

Oct. 24, 2019, 4:10 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-297-01

Summary

This advisory contains mitigations for a missing authentication for critical function and use of hard-coded vulnerabilities in Rittal's Chiller SK 3232-series IT application cooler.

16:05

https://www.us-cert.gov/ics/advisories/icsa-19-297-02

Honeywell IP-AK2

Title

Honeywell IP-AK2

Published

Oct. 24, 2019, 4:05 p.m.

URL

Summary

This advisory contains mitigations for a missing authentication for critical function vulnerability in Honeywell's IP-AK2 access control panels.

Tuesday, 22.10.2019

16:00

Schneider Electric ProClima

Title

Schneider Electric ProClima

Published

Oct. 22, 2019, 4 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-295-01

Summary

This advisory contains mitigations for code injection, improper restriction of operations within the bounds of a memory buffer, and uncontrolled search path element vulnerabilities in Schneider Electric's ProClima building and automation control products.

Thursday, 10.10.2019

16:05

Siemens Industrial Real-Time (IRT) Devices

Title

Siemens Industrial Real-Time (IRT) Devices

Published

Oct. 10, 2019, 4:05 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-283-01

Summary

This advisory includes mitigations for an improper input validation vulnerability reported in the Siemens Industrial Real-Time (IRT) devices.

16:00

Siemens PROFINET Devices

Title

Siemens PROFINET Devices

Published

Oct. 10, 2019, 4 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-283-02

Summary

This advisory contains mitigations for an uncontrolled resource consumption vulnerability in Siemens PROFINET devices.

15:45

Siemens SIMATIC WinCC and PCS7 (Update C)

Title

Siemens SIMATIC WinCC and PCS7 (Update C)

Published

Oct. 10, 2019, 3:45 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-192-02

Summary

This updated advisory is a follow-up to the advisory update titled ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 (Update B) that was published September 10, 2019, on the ICS webpage of us-cert.gov. This updated advisory includes mitigations for an unrestricted upload of file with dangerous type vulnerability reported in the Siemens ...

15:40

Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)

Title

Siemens SIMATIC PCS7, WinCC, TIA Portal (Update D)

Published

Oct. 10, 2019, 3:40 p.m.

URL

https://www.us-cert.gov/ics/advisories/ICSA-19-134-08

Summary

This updated advisory is a follow-up to the advisory update titled ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update C) that was published September 10, 2019, on the ICS webpage on us-cert.gov. This updated advisory includes mitigations for SQL injection, uncaught exception, and exposed dangerous method vulnerabilities reported in the ...

15:35

Philips Brilliance Computed Tomography (CT) System (Update A)

Title

Philips Brilliance Computed Tomography (CT) System (Update A)

Published

Oct. 10, 2019, 3:35 p.m.

URL

https://www.us-cert.gov/ics/advisories/ICSMA-18-123-01

Summary

This updated medical advisory is a follow-up to the original advisory titled ICSMA-18-123-01 Philips’ Brilliance Computed Tomography (CT) System that was published May 3, 2018, on the ICS webpage on us-cert.gov. This updated medical advisory includes mitigations for execution with unnecessary privileges, exposure of resource to wrong sphere, and use ...

15:30

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

Title

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I)

Published

Oct. 10, 2019, 3:30 p.m.

URL

https://www.us-cert.gov/ics/advisories/ICSA-16-313-02

Summary

This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02 Siemens Industrial Products Local Privilege Escalation Vulnerability (Update H) that was published June 14, 2018, on the ICS webpage on us-cert.gov. This updated advisory contains mitigation details for a privilege escalation vulnerability that affects several Siemens industrial products.

Tuesday, 08.10.2019

16:15

Siemens Industrial Products (Update A)

Title

Siemens Industrial Products (Update A)

Published

Oct. 8, 2019, 4:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-253-03

Summary

This updated advisory includes mitigations for integer overflow or wraparound and uncontrolled resource consumption vulnerabilities reported in Siemens’ industrial products. This updated advisory is a follow-up to the original advisory titled ICSA-19-253-03 Siemens Industrial Products that was published September 10, 2019, on the ICS webpage on us-cert.gov.

16:15

SMA Solar Technology AG Sunny WebBox

Title

SMA Solar Technology AG Sunny WebBox

Published

Oct. 8, 2019, 4:15 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-281-01

Summary

This advisory includes mitigations for a cross-site request forgery vulnerability reported in the SMA Solar Technology AG Sunny WebBox communications hub.

16:10

GE Mark VIe Controller

Title

GE Mark VIe Controller

Published

Oct. 8, 2019, 4:10 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-281-02

Summary

This advisory includes mitigations for improper authorization and use of hard-coded credentials vulnerabilities reported in GE’s Mark VIe controller.

16:05

Siemens SIMATIC WinAC RTX (F) 2010

Title

Siemens SIMATIC WinAC RTX (F) 2010

Published

Oct. 8, 2019, 4:05 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-281-03

Summary

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in the Siemens SIMATIC WinAC RTX (F) 2010 software controller for PC-based automation solutions.

16:00

Siemens SIMATIC IT UADM

Title

Siemens SIMATIC IT UADM

Published

Oct. 8, 2019, 4 p.m.

URL

https://www.us-cert.gov/ics/advisories/icsa-19-281-04

Summary

This advisory includes mitigations for an inadequate encryption strength vulnerability reported in the Siemens SIMATIC IT Unified Architecture Discrete Manufacturing (UADM) production management software.

SSA-462066 (Last Update: 2019-10-08): Vulnerability known as TCP SACK PANIC in Industrial Products

Title

SSA-462066 (Last Update: 2019-10-08): Vulnerability known as TCP SACK PANIC in Industrial Products

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Summary

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. Siemens has released updates for several affected products, and recommends that customers update to the new version. Siemens is preparing ...

SSA-608355 (Last Update: 2019-10-08): Processor Vulnerabilities Affecting SIMATIC WinAC RTX (F) 2010

Title

SSA-608355 (Last Update: 2019-10-08): Processor Vulnerabilities Affecting SIMATIC WinAC RTX (F) 2010

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf

Summary

Security researchers published information on vulnerabilities known as Spectre, Meltdown, Spectre-NG, Foreshadow, L1 Terminal Fault (L1TF), ZombieLoad, and Microarchitectural Data Sampling (MDS). These vulnerabilities affect many modern processors from different vendors to a varying degree. The latest release of SIMATIC WinAC RTX provides compatibility with the latest BIOS updates and ...

SSA-480230 (Last Update: 2019-10-08): Denial-of-Service in Webserver of Industrial Products

Title

SSA-480230 (Last Update: 2019-10-08): Denial-of-Service in Webserver of Industrial Products

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-480230.pdf

Summary

A vulnerability in the affected devices could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released updates for several affected products, and recommends that customers update to the new version. Siemens is preparing further updates and recommends ...

SSA-984700 (Last Update: 2019-10-08): Password Storage Vulnerability in SIMATIC IT UADM

Title

SSA-984700 (Last Update: 2019-10-08): Password Storage Vulnerability in SIMATIC IT UADM

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-984700.pdf

Summary

A vulnerability has been identified in the SIMATIC IT Unified Architecture Discrete Manufacturing product that caused a password to be encrypted with a predicable encryption key. An authenticated attacker could potentially recover the password and gain access to the TeamCenter station connected to the instance. Siemens provides updates to address ...

SSA-592007 (Last Update: 2019-10-08): Denial-of-Service Vulnerability in Industrial Products

Title

SSA-592007 (Last Update: 2019-10-08): Denial-of-Service Vulnerability in Industrial Products

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-592007.pdf

Summary

Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a Denial-of-Service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has released ...

SSA-293562 (Last Update: 2019-10-08): Vulnerabilities in Industrial Products

Title

SSA-293562 (Last Update: 2019-10-08): Vulnerabilities in Industrial Products

Published

Oct. 8, 2019, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf

Summary

Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a Denial-of-Service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has released updates ...