Bulletins | CERT@VDE

SSA-765405 V1.0: Multiple Vulnerabilities in SIMATIC RFID Readers

Title

SSA-765405 V1.0: Multiple Vulnerabilities in SIMATIC RFID Readers

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-765405.html

Summary

SIMATIC RFID Readers contain multiple vulnerabilities that could allow an attacker to cause Denial-of-Service, exploit hidden functionality and information exposure. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-293562 V3.6 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products

Title

SSA-293562 V3.6 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-293562.html

Summary

Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has ...

SSA-753746 V1.4 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software ...

Title

SSA-753746 V1.4 (Last Update: 2024-09-10): Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-753746.html

Summary

Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-103653 V1.0: Denial-of-Service Vulnerability in Automation License Manager

Title

SSA-103653 V1.0: Denial-of-Service Vulnerability in Automation License Manager

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-103653.html

Summary

A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the system. Siemens has released a new version for Automation License Manager V6.2 and ...

SSA-280603 V1.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

Title

SSA-280603 V1.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in SINUMERIK ONE and SINUMERIK MC

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-280603.html

Summary

A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port 102/tcp. Siemens is preparing ...

SSA-921449 V1.1 (Last Update: 2024-09-10): Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices

Title

SSA-921449 V1.1 (Last Update: 2024-09-10): Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-921449.html

Summary

LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a plaintext storage of a password vulnerability. This could allow an attacker with phyiscal access to an affected device to extract user-set passwords from an embedded storage IC. Siemens has released new hardware versions with the LOGO! V8.4 BM and the SIPLUS ...

SSA-883918 V1.1 (Last Update: 2024-09-10): Information Disclosure Vulnerability in SIMATIC WinCC

Title

SSA-883918 V1.1 (Last Update: 2024-09-10): Information Disclosure Vulnerability in SIMATIC WinCC

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-883918.html

Summary

Multiple versions of SIMATIC WinCC and SIMATIC PCS 7 do not properly handle certain requests to their web application (WinCC WebNavigator, PCS 7 Web Server, and PCS 7 Web Diagnostics Server), which may lead to the leak of privileged information. This could allow an unauthenticated remote attacker to retrieve information ...

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Title

SSA-359713 V1.0: Authorization Bypass Vulnerability in Industrial Edge Management

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-359713.html

Summary

Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-869574 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2

Title

SSA-869574 V1.0: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-869574.html

Summary

SINEMA Remote Connect Server before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.

SSA-349422 V2.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Title

SSA-349422 V2.1 (Last Update: 2024-09-10): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Summary

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-844582 V1.1 (Last Update: 2024-09-10): Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8....

Title

SSA-844582 V1.1 (Last Update: 2024-09-10): Electromagnetic Fault Injection in LOGO! V8.3 BM Devices Results in Broken LOGO! V8.3 Product CA

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-844582.html

Summary

LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject public keys of custom created key pairs which are then signed ...

SSA-721642 V1.0: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4

Title

SSA-721642 V1.0: Injection Vulnerability in SCALANCE W700 802.11 AX Family Before V2.4

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-721642.html

Summary

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-832273 V1.5 (Last Update: 2024-09-10): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices

Title

SSA-832273 V1.5 (Last Update: 2024-09-10): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-832273.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.

SSA-342438 V1.0: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D

Title

SSA-342438 V1.0: Privilege Escalation Vulnerability in SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D

Published

Sept. 10, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-342438.html

Summary

SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures ...

August 2024

SSA-068047 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2

Title

SSA-068047 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-068047.html

Summary

SCALANCE M-800 family before V7.2.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-087301 V1.0: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1

Title

SSA-087301 V1.0: Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.1

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-087301.html

Summary

SCALANCE M-800 family before V8.1 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Dev...

Title

SSA-364175 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-364175.html

Summary

Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds ...

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Title

SSA-357412 V1.0: PRT File Parsing Vulnerability in NX Before V2406.3000

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-357412.html

Summary

NX (incl. NX student versions) before V2406.3000 contains an out-of-bounds read vulnerability that could be triggered when the application reads PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also to arbitrary code execution on ...

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Title

SSA-180704 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in SCALANCE M-800 Family Before V8.0

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-180704.html

Summary

SCALANCE M-800 family before V8.0 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

SSA-116924 V1.2 (Last Update: 2024-08-13): Path Traversal Vulnerability in TIA Portal

Title

SSA-116924 V1.2 (Last Update: 2024-08-13): Path Traversal Vulnerability in TIA Portal

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-116924.html

Summary

TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution. Siemens has released new versions ...

SSA-771940 V1.1 (Last Update: 2024-08-13): X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Title

SSA-771940 V1.1 (Last Update: 2024-08-13): X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-771940.html

Summary

Teamcenter Visualization and JT2Go are affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability ...

SSA-722010 V1.1 (Last Update: 2024-08-13): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Title

SSA-722010 V1.1 (Last Update: 2024-08-13): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-722010.html

Summary

Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds read vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens ...

SSA-750499 V1.1 (Last Update: 2024-08-13): Weak Encryption Vulnerability in SIPROTEC 5 Devices

Title

SSA-750499 V1.1 (Last Update: 2024-08-13): Weak Encryption Vulnerability in SIPROTEC 5 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-750499.html

Summary

The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions for several affected products and recommends to update to the latest versions. ...

SSA-698820 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Title

SSA-698820 V1.1 (Last Update: 2024-08-13): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices

Published

Aug. 13, 2024, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-698820.html

Summary

Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.