Bulletins | CERT@VDE

1
2
3 (current)

Tuesday, 11.10.2022

02:00

SIEMENS CERT

SSA-280624 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SCALANCE W1750D

Title

SSA-280624 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SCALANCE W1750D

Published

Oct. 11, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf

Summary

The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens ...

02:00

SIEMENS CERT

SSA-258115 V1.0: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9

Title

SSA-258115 V1.0: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9

Published

Oct. 11, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-258115.pdf

Summary

Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current ...

02:00

SIEMENS CERT

SSA-250085 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SINEC NMS

Title

SSA-250085 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SINEC NMS

Published

Oct. 11, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf

Summary

SINEC NMS contains multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released an update for SINEC NMS to fix CVE-2022-24281 and recommends to update to the latest version. Siemens is preparing further ...

Thursday, 06.10.2022

19:08

US CERT

AA22-279A: Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

Title

AA22-279A: Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

Published

Oct. 6, 2022, 7:08 p.m.

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-279a

Summary

Original release date: October 6, 2022SummaryThis joint Cybersecurity Advisory (CSA) provides the top Common Vulnerabilities and Exposures (CVEs) used since 2020 by People’s Republic of China (PRC) state-sponsored cyber actors as assessed by the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and Federal Bureau of Investigation (FBI). ...

16:10

US CERT (ICS)

Rockwell Automation FactoryTalk VantagePoint

Title

Rockwell Automation FactoryTalk VantagePoint

Published

Oct. 6, 2022, 4:10 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-279-01

Summary

16:00

US CERT (ICS)

HIWIN Robot System Software (HRSS)

Title

HIWIN Robot System Software (HRSS)

Published

Oct. 6, 2022, 4 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-279-02

Summary

Tuesday, 04.10.2022

19:58

US CERT

AA22-277A: Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

Title

AA22-277A: Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

Published

Oct. 4, 2022, 7:58 p.m.

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-277a

Summary

Original release date: October 4, 2022SummaryActions to Help Protect Against Russian State-Sponsored Malicious Cyber Activity: • Enforce multifactor authentication (MFA) on all user accounts. • Implement network segmentation to separate network segments based on role and functionality. • Update software, including operating systems, applications, and firmware, on network assets. • ...

16:20

US CERT (ICS)

BD Totalys MultiProcessor

Title

BD Totalys MultiProcessor

Published

Oct. 4, 2022, 4:20 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsma-22-277-01

Summary

16:15

US CERT (ICS)