Bulletins | CERT@VDE

Positron Broadcast Signal Processor

Title

Positron Broadcast Signal Processor

Published

July 25, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-207-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Positron S.R.L Equipment: Broadcast Signal Processor TRA7005 Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access ...

Wednesday, 24.07.2024

18:37

US CERT

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Title

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Published

July 24, 2024, 6:37 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a

Summary

Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: U.S. Cyber National Mission Force (CNMF) U.S. ...

Tuesday, 23.07.2024

National Instruments LabVIEW

Title

National Instruments LabVIEW

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: LabVIEW Vulnerabilities: Out-of-Bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a local attacker to disclose information and execute arbitrary ...

Hitachi Energy AFS/AFR Series Products

Title

Hitachi Energy AFS/AFR Series Products

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: AFS650, AFS660, AFS665, AFS670, AFS675, AFS677, AFR677 Vulnerabilities: Type Confusion, Use After Free, Double Free, Observable Discrepancy 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to create a denial-of-service ...

National Instruments IO Trace

Title

National Instruments IO Trace

Published

July 23, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-205-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: National Instruments Equipment: IO Trace Vulnerability: Stack-Based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following National Instruments I/O ...

Monday, 22.07.2024

SSA-723487 V1.1 (Last Update: 2024-07-22): RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE,...

Title

SSA-723487 V1.1 (Last Update: 2024-07-22): RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products

Published

July 22, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-723487.html

Summary

This advisory documents the impact of CVE-2024-3596 (also dubbed “Blastradius”), a vulnerability in the RADIUS protocol, to SCALANCE, RUGGEDCOM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RADIUS client, e.g., SCALANCE or RUGGEDCOM devices) and a RADIUS server (e.g., SINEC INS), to ...

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Title

SSA-071402 V1.0: Multiple Vulnerabilities in SICAM Products

Published

July 22, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-071402.html

Summary

Multiple SICAM products are affected by unauthorized password reset and firmware downgrade vulnerabilities that could lead to privilege escalation and potential leak of information, namely: SICAM A8000 Device firmware CPCI85 for CP-8031/CP-8050 SICAM EGS Device firmware CPCI85 SICAM 8 Software Solution SICORE Siemens has released new firmware versions for the ...

Friday, 19.07.2024

"regreSSHion" OpenSSH vulnerability in PRC7000

BOSCH PSIRT

Title

"regreSSHion" OpenSSH vulnerability in PRC7000

Published

July 19, 2024, 2 a.m.

URL

https://psirt.bosch.com/security-advisories/bosch-sa-258444.html

Summary

BOSCH-SA-248444: The Qualys Threat Research Unit (TRU) has discovered a Remote Unauthenticated Code Execution (RCE) vulnerability in OpenSSH’s server (sshd) in glibc-based Linux systems. The vulnerability, which is a signal handler race condition in OpenSSH’s server (sshd), allows unauthenticated remote code execution (RCE) as root on glibc-based Linux systems; that ...

Thursday, 18.07.2024

Subnet Solutions PowerSYSTEM Center

Title

Subnet Solutions PowerSYSTEM Center

Published

July 18, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-200-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Subnet Solutions Inc. Equipment: Subnet PowerSYSTEM Center Vulnerability: Prototype Pollution 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated attacker to elevate permissions. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of ...

Mitsubishi Electric MELSOFT MaiLab

Title

Mitsubishi Electric MELSOFT MaiLab

Published

July 18, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-200-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.2 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Corporation Equipment: MELSOFT MaiLab Vulnerability: Improper Verification of Cryptographic Signature 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote attacker to cause a denial-of-service condition in the target product. 3. TECHNICAL DETAILS 3.1 ...

Tuesday, 16.07.2024

Rockwell Automation Pavilion 8

Title

Rockwell Automation Pavilion 8

Published

July 16, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-198-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Pavilion 8 Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to create new users and view sensitive data. 3. TECHNICAL DETAILS 3.1 ...

Thursday, 11.07.2024

Siemens SIMATIC and SIMIT

Title

Siemens SIMATIC and SIMIT

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-07

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).View CSAF 1. EXECUTIVE SUMMARY CVSS ...

Siemens RUGGEDCOM APE 1808

Title

Siemens RUGGEDCOM APE 1808

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-02

Summary

Siemens TIA Portal and SIMATIC STEP 7

Title

Siemens TIA Portal and SIMATIC STEP 7

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-12

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-06

Siemens RUGGEDCOM

Title

Siemens RUGGEDCOM

Published

July 11, 2024, 2 p.m.

URL

Summary

Siemens Remote Connect Server

Title

Siemens Remote Connect Server

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-01

Summary

Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC

Title

Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-05

Summary

Siemens JT Open and PLM XML SDK

Title

Siemens JT Open and PLM XML SDK

Published

July 11, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-193-10

Summary

Tuesday, 09.07.2024

16:09

US CERT

CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

Title

CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

Published

July 9, 2024, 4:09 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-193a

Summary

EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch (FCEB) organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of nation-state cyber operations. The team mimics the techniques, tradecraft, and behaviors ...

Delta Electronics CNCSoft-G2

Title

Delta Electronics CNCSoft-G2

Published

July 9, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: CNCSoft-G2 Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause a buffer overflow condition and allow remote code execution. 3. TECHNICAL DETAILS ...

Johnson Controls Software House C●CURE 9000

Title

Johnson Controls Software House C●CURE 9000

Published

July 9, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Johnson Controls Inc. Equipment: Software House C●CURE 9000 Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an attacker to access credentials used for access to the application. 3. TECHNICAL DETAILS ...

Mitsubishi Electric MELIPC Series MI5122-VW

Title

Mitsubishi Electric MELIPC Series MI5122-VW

Published

July 9, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Equipment: MI5122-VW Vulnerability: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to tamper with, destroy, disclose, or delete information in the product, or cause a denial-of-service (DoS) condition ...

Johnson Controls Illustra Pro Gen 4

Title

Johnson Controls Illustra Pro Gen 4

Published

July 9, 2024, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.0 ATTENTION: Exploitable remotely Vendor: Johnson Controls, Inc. Equipment: Illustra Pro Gen 4 Vulnerability: Dependency on Vulnerable Third-Party Component 2. RISK EVALUATION Successful exploitation of this vulnerability could impact confidentiality and integrity of the device. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Johnson Controls ...

SSA-750499 V1.0: Weak Encryption Vulnerability in SIPROTEC 5 Devices

Title

SSA-750499 V1.0: Weak Encryption Vulnerability in SIPROTEC 5 Devices

Published

July 9, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-750499.html

Summary

The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. ...