Bulletins | CERT@VDE

SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices

Title

SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-725549.html

Summary

A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through specially crafted ICMP packets. A successful attack will impact the availability ...

SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices

Title

SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-767615.html

Summary

An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products ...

SSA-770770 V1.2 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Title

SSA-770770 V1.2 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-770770.html

Summary

Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-817234 V1.0: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud

Title

SSA-817234 V1.0: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-817234.html

Summary

Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the ingress-nginx controller, or disclosure of Secrets accessible to the controller, or denial of service condition. Siemens has released a new version for ...

SSA-819629 V1.0: Weak Authentication Vulnerability in Industrial Edge Device Kit

Title

SSA-819629 V1.0: Weak Authentication Vulnerability in Industrial Edge Device Kit

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-819629.html

Summary

Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings within the open Industrial Edge ecosystem. See further details about affected Industrial Edge Devices ...

SSA-874353 V1.0: Entity Enumeration Vulnerability in Mendix Runtime

Title

SSA-874353 V1.0: Entity Enumeration Vulnerability in Mendix Runtime

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-874353.html

Summary

Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...

SSA-876787 V1.5 (Last Update: 2025-04-08): Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs

Title

SSA-876787 V1.5 (Last Update: 2025-04-08): Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-876787.html

Summary

Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitimate user must actively click on an attacker-crafted link. Siemens ...

SSA-265688 V1.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP ...

Title

SSA-265688 V1.5 (Last Update: 2025-04-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Title

SSA-913875 V1.4 (Last Update: 2025-04-08): Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-913875.html

Summary

Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forge encrypted frames, which could result in sensitive data disclosure and possibly traffic manipulation. The ...

SSA-935500 V1.2 (Last Update: 2025-04-08): Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON an...

Title

SSA-935500 V1.2 (Last Update: 2025-04-08): Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-935500.html

Summary

A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use affected versions of the Nucleus software and inherently contain the vulnerability. Siemens has released new versions for several affected products and ...

SSA-306654 V1.9 (Last Update: 2025-04-08): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Title

SSA-306654 V1.9 (Last Update: 2025-04-08): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Published

April 8, 2025, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-306654.html

Summary

Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures ...

Thursday, 03.04.2025

ABB ACS880 Drives Containing CODESYS RTS

Title

ABB ACS880 Drives Containing CODESYS RTS

Published

April 3, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: ACS880 Drives with IEC 61131-3 license Vulnerabilities: Improper Input Validation, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an ...

Hitachi Energy RTU500 Series

Title

Hitachi Energy RTU500 Series

Published

April 3, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 series Vulnerabilities: Null Pointer Dereference, Insufficient Resource Pool, Missing Synchronization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05

B&R APROL

Title

B&R APROL

Published

April 3, 2025, 2 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: B&R Equipment: APROL Vulnerabilities: Inclusion of Functionality from Untrusted Control Sphere, Incomplete Filtering of Special Elements, Improper Control of Generation of Code ('Code Injection'), Improper Handling of Insufficient Permissions or Privileges , Allocation of Resources Without ...

Hitachi Energy TRMTracker

Title

Hitachi Energy TRMTracker

Published

April 3, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: TRMTracker Vulnerabilities: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection'), Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Improper Neutralization of Input During Web ...

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

Title

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

Published

April 3, 2025, 2 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: DCT880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCT880 memory unit incl. Power Optimizer, DCS880 memory unit incl. ABB Drive Application Builder license (IEC 61131-3), DCS880 memory unit incl. DEMag, DCS880 ...

Tuesday, 01.04.2025

21:00

US CERT

Fast Flux: A National Security Threat

Title

Fast Flux: A National Security Threat

Published

April 1, 2025, 9 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-093a

Summary

Executive summary Many networks have a gap in their defenses for detecting and blocking a malicious technique known as “fast flux.” This technique poses a significant threat to national security, enabling malicious cyber actors to consistently evade detection. Malicious cyber actors, including cybercriminals and nation-state actors, use fast flux to ...