Bulletins | CERT@VDE

Mitsubishi Electric Europe B.V. smartRTU

Title

Mitsubishi Electric Europe B.V. smartRTU

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-09

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Europe B.V. Equipment: smartRTU Vulnerability: Missing Authentication for Critical Function, OS Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete ...

Lantronix Xport (Update A)

Title

Lantronix Xport (Update A)

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Lantronix Equipment: XPort Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations. 3. TECHNICAL ...

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Title

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Published

April 15, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-03

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Monday, 14.04.2025

SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime

Title

SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime

Published

April 14, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Summary

Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...

Thursday, 10.04.2025

Siemens License Server

Title

Siemens License Server

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-01

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02

Siemens SIDIS Prime

Title

Siemens SIDIS Prime

Published

April 10, 2025, 2 p.m.

URL

Summary

ABB Arctic Wireless Gateways

Title

ABB Arctic Wireless Gateways

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: Arctic Wireless Gateways Vulnerabilities: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Improper Privilege Management, Exposure of Sensitive Information to an Unauthorized Actor, Improper Limitation of a Pathname to a Restricted Directory ...

Siemens SENTRON 7KT PAC1260 Data Manager

Title

Siemens SENTRON 7KT PAC1260 Data Manager

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-06

Summary

Siemens Insights Hub Private Cloud

Title

Siemens Insights Hub Private Cloud

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-05

Summary

Siemens Industrial Edge Devices

Title

Siemens Industrial Edge Devices

Published

April 10, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-04

Summary

SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime

Title

SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime

Published

April 10, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Summary

Tuesday, 08.04.2025

SSA-277137 V1.0: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700

Title

SSA-277137 V1.0: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-277137.html

Summary

SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

SSA-195895 V1.2 (Last Update: 2025-04-08): User Enumeration Vulnerability in the Webserver of SIMATIC Products

Title

SSA-195895 V1.2 (Last Update: 2025-04-08): User Enumeration Vulnerability in the Webserver of SIMATIC Products

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-195895.html

Summary

The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-187636 V1.0: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager

Title

SSA-187636 V1.0: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-187636.html

Summary

SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Siemens recommends to replace the device by the new SENTRON 7KT PAC1261 ...

SSA-054046 V1.4 (Last Update: 2025-04-08): Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Title

SSA-054046 V1.4 (Last Update: 2025-04-08): Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-054046.html

Summary

Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has released new versions for several affected products and recommends to update to the ...

SSA-354569 V1.3 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Title

SSA-354569 V1.3 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-354569.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. [1] https://security.paloaltonetworks.com/

SSA-364175 V1.5 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-364175 V1.5 (Last Update: 2025-04-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-369369 V1.1 (Last Update: 2025-04-08): Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagM...

Title

SSA-369369 V1.1 (Last Update: 2025-04-08): Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-369369.html

Summary

SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-398330 V2.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSA-398330 V2.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP

Title

SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-503939.html

Summary

Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3

Title

SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-525431.html

Summary

Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Title

SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-634640.html

Summary

Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...

SSA-672923 V1.0: Out of Bounds Write Vulnerability in Solid Edge

Title

SSA-672923 V1.0: Out of Bounds Write Vulnerability in Solid Edge

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-672923.html

Summary

Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability ...

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Title

SSA-686975 V1.6 (Last Update: 2025-04-08): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-686975.html

Summary

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update (“2022.3 IPU – BIOS Advisory” Intel-SA-00688). Siemens has released new versions for several affected products and ...