Bulletins | CERT@VDE

SSA-431678 V1.3 (Last Update: 2022-08-09): Denial-of-Service Vulnerability in SIMATIC S7 CPU Families

Title

SSA-431678 V1.3 (Last Update: 2022-08-09): Denial-of-Service Vulnerability in SIMATIC S7 CPU Families

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-431678.pdf

Summary

SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a Denial-of-Service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affected products, is working on updates for the remaining affected ...

SSA-764417 V1.4 (Last Update: 2022-08-09): Weak Encryption Vulnerability in RUGGEDCOM ROS Devices

Title

SSA-764417 V1.4 (Last Update: 2022-08-09): Weak Encryption Vulnerability in RUGGEDCOM ROS Devices

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-764417.pdf

Summary

The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affected device. Siemens recommends specific countermeasures for products where updates ...

SSA-759952 V1.0: Command Injection and Denial of Service Vulnerability in Teamcenter

Title

SSA-759952 V1.0: Command Injection and Denial of Service Vulnerability in Teamcenter

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdf

Summary

Teamcenter is affected by two security vulnerabilities in the File Service Cache service that could lead to command injection and denial of service issues. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-789162 V1.2 (Last Update: 2022-08-09): Vulnerabilities in Teamcenter

Title

SSA-789162 V1.2 (Last Update: 2022-08-09): Vulnerabilities in Teamcenter

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-789162.pdf

Summary

Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-829738 V1.1 (Last Update: 2022-08-09): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Title

SSA-829738 V1.1 (Last Update: 2022-08-09): Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-829738.pdf

Summary

Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds write vulnerability in APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has ...

SSA-840800 V1.1 (Last Update: 2022-08-09): Code Injection Vulnerability in RUGGEDCOM ROS

Title

SSA-840800 V1.1 (Last Update: 2022-08-09): Code Injection Vulnerability in RUGGEDCOM ROS

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-840800.pdf

Summary

RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the Command Line Interface (CLI). Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products ...

SSA-306654 V1.3 (Last Update: 2022-08-09): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Title

SSA-306654 V1.3 (Last Update: 2022-08-09): Insyde BIOS Vulnerabilities in Siemens Industrial Products

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Summary

Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.

SSA-732250 V1.2 (Last Update: 2022-08-09): Libcurl Vulnerabilities in Industrial Devices

Title

SSA-732250 V1.2 (Last Update: 2022-08-09): Libcurl Vulnerabilities in Industrial Devices

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-732250.pdf

Summary

Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where updates are not, or not yet available.

SSA-629512 V1.6 (Last Update: 2022-08-09): Local Privilege Escalation Vulnerability in TIA Portal

Title

SSA-629512 V1.6 (Last Update: 2022-08-09): Local Privilege Escalation Vulnerability in TIA Portal

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-629512.pdf

Summary

The latest updates for TIA Portal fix a vulnerability that could allow a local attacker to execute arbitrary code with SYSTEM privileges. Update: The previously provided fixes only correctly set the permissions on English Windows versions. Siemens has released updates for several affected products and recommends to update to the ...

SSA-941426 V1.3 (Last Update: 2022-08-09): Multiple LLDP Vulnerabilities in Industrial Products

Title

SSA-941426 V1.3 (Last Update: 2022-08-09): Multiple LLDP Vulnerabilities in Industrial Products

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-941426.pdf

Summary

There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-914168 V1.3 (Last Update: 2022-08-09): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Title

SSA-914168 V1.3 (Last Update: 2022-08-09): Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-914168.pdf

Summary

Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures for products ...

SSA-429204 V1.1 (Last Update: 2022-08-09): Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Title

SSA-429204 V1.1 (Last Update: 2022-08-09): Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-429204.pdf

Summary

JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens ...

SSA-841348 V1.9 (Last Update: 2022-08-09): Multiple Vulnerabilities in the UMC Component

Title

SSA-841348 V1.9 (Last Update: 2022-08-09): Multiple Vulnerabilities in the UMC Component

Published

Aug. 9, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf

Summary

The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial-of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execute code with SYSTEM level privileges. Siemens has released updates for several ...

July 2022

SSA-838121 V1.2 (Last Update: 2022-07-12): Multiple Denial of Service Vulnerabilities in Industrial Products

Title

SSA-838121 V1.2 (Last Update: 2022-07-12): Multiple Denial of Service Vulnerabilities in Industrial Products

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-838121.pdf

Summary

Affected SIMATIC firmware contains three vulnerabilities that could allow an unauthenticated attacker to perform a denial-of-service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures for products where updates are not, ...

SSA-433782 V1.0: Improper Access Control Vulnerability in Mendix

Title

SSA-433782 V1.0: Improper Access Control Vulnerability in Mendix

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-433782.pdf

Summary

An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has released updates for the affected products and recommends to update to the latest ...

SSA-429204 V1.0: Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Title

SSA-429204 V1.0: Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-429204.pdf

Summary

SSA-414513 V1.2 (Last Update: 2022-07-12): Information Disclosure Vulnerability in Mendix

Title

SSA-414513 V1.2 (Last Update: 2022-07-12): Information Disclosure Vulnerability in Mendix

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf

Summary

An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for the affected products and recommends to update to the latest versions.

SSA-865333 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Title

SSA-865333 V1.0: Memory Corruption Vulnerability in EN100 Ethernet Module

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-865333.pdf

Summary

EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures for products where updates are not, or not yet available.

SSA-840800 V1.0: Code Injection Vulnerability in RUGGEDCOM ROS

Title

SSA-840800 V1.0: Code Injection Vulnerability in RUGGEDCOM ROS

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-840800.pdf

Summary

RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the console. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are ...

SSA-439148 V1.0: File Parsing Vulnerabilities in PADS Standard/Plus Viewer

Title

SSA-439148 V1.0: File Parsing Vulnerabilities in PADS Standard/Plus Viewer

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-439148.pdf

Summary

Siemens PADS Standard/Plus Viewer is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads files in PCB format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the ...

SSA-474231 V1.0: File Parsing Vulnerability in Simcenter Femap before V2022.2

Title

SSA-474231 V1.0: File Parsing Vulnerability in Simcenter Femap before V2022.2

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-474231.pdf

Summary

Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote ...

SSB-439005 V4.5 (Last Update: 2022-07-12): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...

Title

SSB-439005 V4.5 (Last Update: 2022-07-12): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf

Summary

SSA-446448 V1.2 (Last Update: 2022-07-12): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Title

SSA-446448 V1.2 (Last Update: 2022-07-12): Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-446448.pdf

Summary

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further ...

SSA-829738 V1.0: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Title

SSA-829738 V1.0: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published

July 12, 2022, 2 a.m.

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-829738.pdf

Summary

Siemens has released a new version for Teamcenter Visualization and JT2Go that fixes an out of bounds write vulnerability in APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to ...