Bulletins | CERT@VDE

SSA-852501 V1.0: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000

Title

SSA-852501 V1.0: Multiple Memory Corruption Vulnerabilities in Simcenter Nastran Before 2406.5000

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-852501.html

Summary

Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. ...

SSA-039007 V1.1 (Last Update: 2024-10-08): Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Title

SSA-039007 V1.1 (Last Update: 2024-10-08): Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-039007.html

Summary

Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for ...

SSA-054046 V1.0: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Title

SSA-054046 V1.0: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-054046.html

Summary

Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has released new versions for several affected products and recommends to update to the ...

SSA-321292 V1.6 (Last Update: 2024-10-08): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...

Title

SSA-321292 V1.6 (Last Update: 2024-10-08): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-321292.html

Summary

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. ...

SSA-254396 V1.0: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Title

SSA-254396 V1.0: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-254396.html

Summary

Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-148641 V1.3 (Last Update: 2024-10-08): XPath Constraint Vulnerability in Mendix Runtime

Title

SSA-148641 V1.3 (Last Update: 2024-10-08): XPath Constraint Vulnerability in Mendix Runtime

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-148641.html

Summary

A XPath Constraint vulnerability in the Mendix Runtime was discovered, that can affect the running applications. The vulnerability could allow a malicious user to deduce contents of inaccessible attributes and modify sensitive data. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-097435 V1.2 (Last Update: 2024-10-08): Usernames Disclosure Vulnerability in Mendix Runtime

Title

SSA-097435 V1.2 (Last Update: 2024-10-08): Usernames Disclosure Vulnerability in Mendix Runtime

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-097435.html

Summary

Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-366067 V1.1 (Last Update: 2024-10-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices

Title

SSA-366067 V1.1 (Last Update: 2024-10-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.1 on RUGGEDCOM APE1808 Devices

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-366067.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-364175 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-364175 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-368868 V1.0: Multiple Vulnerabilities in WibuKey for Windows

Title

SSA-368868 V1.0: Multiple Vulnerabilities in WibuKey for Windows

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-368868.html

Summary

Several Siemens products (optionally) offer the use of WibuKey Dongles [1] for licensing. According to a recent publication by WIBU Systems (WIBU-94453 at [2]), the Windows device driver for these Dongles contains vulnerabilities as listed below. [1] https://www.wibu.com/products/wibukey.html [2] https://www.wibu.com/support/security-advisories.html WIBU Systems has released a new version for WibuKey for ...

SSA-340240 V1.0: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory

Title

SSA-340240 V1.0: Denial of Service Vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-340240.html

Summary

A vulnerability in Sentron Powercenter 1000 with 3RV2921-5M accessory could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-398330 V1.9 (Last Update: 2024-10-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSA-398330 V1.9 (Last Update: 2024-10-08): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Summary

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...

SSA-540493 V1.0: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2

Title

SSA-540493 V1.0: Kiosk Mode Escape Vulnerability in HiMed Cockpit Devices Before V11.6.2

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-540493.html

Summary

HiMed Cockpit devices before V11.6.2 contain a Kiosk Mode Escape vulnerability that could allow an attacker to escape the restricted environment and gain access to the underlying operating system. Siemens has released a new version for the HiMed Cockpit devices and recommends to update to the latest version.

SSA-455250 V1.4 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-455250 V1.4 (Last Update: 2024-10-08): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-455250.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to ...

SSA-583523 V1.0: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Title

SSA-583523 V1.0: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-583523.html

Summary

Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code ...

SSA-620288 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

Title

SSA-620288 V1.2 (Last Update: 2024-10-08): Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-620288.html

Summary

Multiple vulnerabilities (also known as “NUCLEUS:13”) have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embedded AR Classic uses an affected version of the Nucleus software and inherently contains several of these vulnerabilities. Siemens has released a new version ...

SSA-430425 V1.0: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0

Title

SSA-430425 V1.0: Multiple Vulnerabilities in SINEC Security Monitor before V4.9.0

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-430425.html

Summary

SINEC Security Monitor before V4.9.0 contains multiple vulnerabilities. Siemens has released a new version for Siemens SINEC Security Monitor and recommends to update to the latest version.

SSA-626178 V1.0: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003

Title

SSA-626178 V1.0: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-626178.html

Summary

Siemens JT2Go is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in PDF format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary ...

SSA-426509 V1.0: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3

Title

SSA-426509 V1.0: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim Before V2024.3

Published

Oct. 8, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-426509.html

Summary

Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.

September 2024

12.09.2024

SSA-097435 V1.1 (Last Update: 2024-09-12): Usernames Disclosure Vulnerability in Mendix Runtime

Title

SSA-097435 V1.1 (Last Update: 2024-09-12): Usernames Disclosure Vulnerability in Mendix Runtime

Published

Sept. 12, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-097435.html

Summary

SSA-342438 V1.0: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D

Title

SSA-342438 V1.0: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-342438.html

Summary

SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures ...

SSA-293562 V3.6 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products

Title

SSA-293562 V3.6 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-293562.html

Summary

Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has ...

SSA-280603 V1.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

Title

SSA-280603 V1.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-280603.html

Summary

A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp. Siemens is preparing ...

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Title

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-359713.html

Summary

Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system. Siemens has released new versions for the affected products and recommends to update to the latest versions.