Bulletins | CERT@VDE

SSA-382653 V1.3 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in Industrial Products

Title

SSA-382653 V1.3 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in Industrial Products

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-382653.html

Summary

Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates ...

SSA-478960 V1.4 (Last Update: 2023-05-09): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Title

SSA-478960 V1.4 (Last Update: 2023-05-09): Missing CSRF Protection in the Web Server Login Page of Industrial Controllers

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-478960.html

Summary

The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for several affected products and recommends to update to the latest versions. ...

SSA-473245 V2.6 (Last Update: 2023-05-09): Denial of Service Vulnerability in Profinet Devices

Title

SSA-473245 V2.6 (Last Update: 2023-05-09): Denial of Service Vulnerability in Profinet Devices

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-473245.html

Summary

A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures ...

SSA-309571 V1.8 (Last Update: 2023-05-09): IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)

Title

SSA-309571 V1.8 (Last Update: 2023-05-09): IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-309571.html

Summary

Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we summarize: “2021.1 IPU – Intel® CSME, SPS and LMS Advisory” Intel-SA-00459, “2021.1 ...

SSA-592007 V2.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Products

Title

SSA-592007 V2.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in Industrial Products

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-592007.html

Summary

Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens ...

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Title

SSA-566905 V1.1 (Last Update: 2023-05-09): Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-566905.html

Summary

Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and ...

SSA-632164 V1.1 (Last Update: 2023-05-09): External Entity Injection Vulnerability in Polarion ALM

Title

SSA-632164 V1.1 (Last Update: 2023-05-09): External Entity Injection Vulnerability in Polarion ALM

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-632164.html

Summary

Polarion ALM is vulnerable to XML External Entity (XXE) injection attack that could allow an attacker to potentially disclose confidential data. Siemens has released an update for Polarion ALM and recommends to update to the latest version.

SSA-555292 V1.0: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1

Title

SSA-555292 V1.0: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-555292.html

Summary

SIMATIC Cloud Connect 7 contains multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-686975 V1.1 (Last Update: 2023-05-09): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Title

SSA-686975 V1.1 (Last Update: 2023-05-09): IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-686975.html

Summary

Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update (“2022.3 IPU – BIOS Advisory” Intel-SA-00688). Siemens is preparing updates and recommends specific countermeasures for products ...

SSA-640968 V1.1 (Last Update: 2023-05-09): Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Mult...

Title

SSA-640968 V1.1 (Last Update: 2023-05-09): Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-640968.html

Summary

TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has released updates for several affected products and recommends to update to the ...

SSA-552874 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Title

SSA-552874 V1.1 (Last Update: 2023-05-09): Denial of Service Vulnerability in SIPROTEC 5 Devices

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-552874.html

Summary

Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...

SSA-480230 V2.7 (Last Update: 2023-05-09): Denial of Service Vulnerability in Webserver of Industrial Products

Title

SSA-480230 V2.7 (Last Update: 2023-05-09): Denial of Service Vulnerability in Webserver of Industrial Products

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-480230.html

Summary

A vulnerability in the affected devices could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products ...

SSA-789345 V1.0: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers

Title

SSA-789345 V1.0: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-789345.html

Summary

Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the affected products and recommends to update to the latest versions. The provided cumulative ...

SSA-712929 V2.0 (Last Update: 2023-05-09): Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Prod...

Title

SSA-712929 V2.0 (Last Update: 2023-05-09): Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-712929.html

Summary

A vulnerability in the openSSL component (CVE-2022-0778, [0]) could allow an attacker to create a denial of service condition by providing specially crafted elliptic curve certificates to products that use a vulnerable version of openSSL. Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-516174 V1.0: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D

Title

SSA-516174 V1.0: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-516174.html

Summary

The SCALANCE W1750D device is affected by Wi-Fi encryption bypass vulnerabilities (“Framing Frames”) that could allow an attacker to disclose sensitive information or to steal the victims session. Siemens is preparing updates and recommends countermeasures for products where updates are not, or not yet available.

SSA-116924 V1.1 (Last Update: 2023-05-09): Path Traversal Vulnerability in TIA Portal

Title

SSA-116924 V1.1 (Last Update: 2023-05-09): Path Traversal Vulnerability in TIA Portal

Published

May 9, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-116924.html

Summary

TIA Portal contains a path traversal vulnerability that could allow the creation or overwrite of arbitrary files in the engineering system. If the user is tricked to open a malicious PC system configuration file, an attacker could exploit this vulnerability to achieve arbitrary code execution. Siemens has released an update ...

April 2023

SSA-310038 V1.1 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE X Switch Devices

Title

SSA-310038 V1.1 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE X Switch Devices

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-310038.html

Summary

Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates ...

SSA-321292 V1.5 (Last Update: 2023-04-11): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial P...

Title

SSA-321292 V1.5 (Last Update: 2023-04-11): Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-321292.html

Summary

A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens ...

SSA-382653 V1.2 (Last Update: 2023-04-11): Multiple Denial of Service Vulnerabilities in Industrial Products

Title

SSA-382653 V1.2 (Last Update: 2023-04-11): Multiple Denial of Service Vulnerabilities in Industrial Products

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-382653.html

Summary

Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial-of-service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, ...

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Title

SSA-349422 V1.9 (Last Update: 2023-04-11): Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-349422.html

Summary

A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-322980 V1.0: Denial of Service Vulnerability in SIPROTEC 5 Devices

Title

SSA-322980 V1.0: Denial of Service Vulnerability in SIPROTEC 5 Devices

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-322980.html

Summary

SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released updates for several affected products and recommends to update to the latest ...

SSA-446448 V1.8 (Last Update: 2023-04-11): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Title

SSA-446448 V1.8 (Last Update: 2023-04-11): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-446448.html

Summary

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further ...

SSA-813746 V1.0: BadAlloc Vulnerabilities in SCALANCE X-200, X-200IRT, and X-300 Switch Families

Title

SSA-813746 V1.0: BadAlloc Vulnerabilities in SCALANCE X-200, X-200IRT, and X-300 Switch Families

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-813746.html

Summary

Siemens has released a new firmware version for SCALANCE X-200 and X-200 IRT switches that address Bad Alloc vulnerabilities in the underlying operating system and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.

SSA-413565 V1.2 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE Products

Title

SSA-413565 V1.2 (Last Update: 2023-04-11): Multiple Vulnerabilities in SCALANCE Products

Published

April 11, 2023, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-413565.html

Summary

Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for several affected products and recommends to update to the latest ...