August 2022
16.08.2022
US CERT (ICS)
LS ELECTRIC PLC and XG5000
Title
LS ELECTRIC PLC and XG5000
Published
Aug. 16, 2022, 4:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-02
Summary
This advisory contains mitigations for an Inadequate Encryption Strength vulnerability in LS ELECTRIC PLC and XG5000, a PLC programming software.
16.08.2022
US CERT (ICS)
Softing Secure Integration Server
Title
Softing Secure Integration Server
Published
Aug. 16, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-04
Summary
This advisory contains mitigations for Out-of-bounds Read, Uncontrolled Search Path Element, Improper Authentication, Relative Path Traversal, Cleartext Transmission of Sensitive Information, NULL Pointer Dereference, and Integer Underflow vulnerabilities in various Softing products.
16.08.2022
US CERT (ICS)
Delta Industrial Automation DRAS
Title
Delta Industrial Automation DRAS
Published
Aug. 16, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-03
Summary
This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Delta Industrial Automation DRAS, a controller software suite.
16.08.2022
US CERT (ICS)
B&R Industrial Automation Automation Studio 4
Title
B&R Industrial Automation Automation Studio 4
Published
Aug. 16, 2022, 4:15 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-05
Summary
This advisory contains mitigations for an Unrestricted Upload of File with Dangerous Type vulnerability in Industrial Automation Automation Studio 4, a PLC automation programming software.
16.08.2022
US CERT (ICS)
Emerson Proficy Machine Edition
Title
Emerson Proficy Machine Edition
Published
Aug. 16, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-06
Summary
This advisory contains mitigations for Missing Support for Integrity Check, Improper Access Control, Unrestricted Upload of File with Dangerous Type, Improper Verification of Cryptographic Signature, Insufficient Verification of Data Authenticity, and Path Traversal: ‘\..\filename’ vulnerabilities in Emerson Proficy Machine Edition, an engineering workstation.
16.08.2022
US CERT (ICS)
Sequi PortBloque S
Title
Sequi PortBloque S
Published
Aug. 16, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-07
Summary
This advisory contains mitigations for Improper Authentication and Improper Authorization vulnerabilities in Sequi PortBloque S, a serial Modbus firewall.
16.08.2022
US CERT (ICS)
Siemens Industrial Products with OPC UA (Update B)
Title
Siemens Industrial Products with OPC UA (Update B)
Published
Aug. 16, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-132-08
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-22-132-08 Siemens Industrial Products with OPC UA (Update A) that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for various Siemens Industrial Products with OPC UA products.
11.08.2022
US CERT (ICS)
Siemens Simcenter STAR-CCM+
Title
Siemens Simcenter STAR-CCM+
Published
Aug. 11, 2022, 4:54 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-223-01
Summary
This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in versions of Siemens Simcenter STAR-CCM+ products.
11.08.2022
US CERT (ICS)
Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70
Title
Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70
Published
Aug. 11, 2022, 4:50 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-223-03
Summary
This advisory contains mitigations for Heap-based Buffer Overflow, Wrap or Wraparound, Classic Buffer Overflow, and Out-of-bounds Write vulnerabilities in products using AT&T Labs Compressor (XMill) and Decompressor (XDemill).
11.08.2022
US CERT (ICS)
Emerson ROC800, ROC800L and DL8000
Title
Emerson ROC800, ROC800L and DL8000
Published
Aug. 11, 2022, 4:48 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-223-04
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerability in versions of ROC800, a remote automation controller.
11.08.2022
US CERT (ICS)
Siemens SICAM A8000 Web Server Module
Title
Siemens SICAM A8000 Web Server Module
Published
Aug. 11, 2022, 4:46 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-223-05
Summary
This advisory contains mitigations for an Improper Access Control vulnerability in versions of SICAM A8000 Web Server Module products.
11.08.2022
US CERT (ICS)
Siemens SICAM TOOLBOX II
Title
Siemens SICAM TOOLBOX II
Published
Aug. 11, 2022, 4:44 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-223-06
Summary
This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in versions of SICAM TOOLBOX II, a control and monitoring system.
11.08.2022
US CERT (ICS)
Siemens SIMATIC S7-400 (Update A)
Title
Siemens SIMATIC S7-400 (Update A)
Published
Aug. 11, 2022, 4:40 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-104-12
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-104-12 Siemens SIMATIC S7-400 that was published April 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens SIMATIC S7-400.
11.08.2022
US CERT (ICS)
Siemens Industrial Products Intel CPUs (Update E)
Title
Siemens Industrial Products Intel CPUs (Update E)
Published
Aug. 11, 2022, 4:38 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-222-05
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-222-05 Siemens Industrial Products Intel CPU (Update D) that was published July 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for a Missing Encryption of Sensitive Data vulnerability in versions of Siemens Industrial Products Intel ...
11.08.2022
US CERT (ICS)
Siemens Industrial Products LLDP (Update C)
Title
Siemens Industrial Products LLDP (Update C)
Published
Aug. 11, 2022, 4:36 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update B) that was published August 10, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Classic Buffer Overflow and Uncontrolled Resource Consumption vulnerabilities in versions of Siemens Industrial Products (LLDP).
09.08.2022
US CERT (ICS)
Mitsubishi Electric GT SoftGOT2000
Title
Mitsubishi Electric GT SoftGOT2000
Published
Aug. 9, 2022, 4:15 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-221-01
Summary
This advisory contains mitigations for Infinite Loop and OS Command Injection vulnerabilities in versions of Mitsubishi Electric GT SoftGOT2000 software.
09.08.2022
US CERT (ICS)
Emerson ControlWave
Title
Emerson ControlWave
Published
Aug. 9, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-221-02
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerabilities in Emerson ControlWave products, a programmable controller.
09.08.2022
US CERT (ICS)
Emerson OpenBSI
Title
Emerson OpenBSI
Published
Aug. 9, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-221-03
Summary
This advisory contains mitigations for Use of Broken or Risky Cryptographic Algorithm and Use of Hard-coded Cryptographic Key vulnerabilities in Emerson OpenBSI, a set of network communication services.
04.08.2022
US CERT (ICS)
Digi ConnectPort X2D
Title
Digi ConnectPort X2D
Published
Aug. 4, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-216-01
Summary
This advisory contains mitigations for an Execution with Unnecessary Privileges vulnerability in Digi ConnectPort X2D, a connection gateway.
02.08.2022
US CERT (ICS)
Delta Electronics DIAEnergie (Update C)
Title
Delta Electronics DIAEnergie (Update C)
Published
Aug. 2, 2022, 4:20 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-238-03
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-238-03 Delta Electronics DIAEnergie (Update B) that was published March 22, 2022, on the ICS webpage at www.cisa.gov/ics. This advisory contains mitigations for Use of Password Hash with Insufficient Computational Effort, Authentication Bypass Using an Alternate Path or Channel, ...
02.08.2022
US CERT (ICS)
Mitsubishi Electric FA Engineering Software Products (Update F)
Title
Mitsubishi Electric FA Engineering Software Products (Update F)
Published
Aug. 2, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02
Summary
his updated advisory is a follow-up to the advisory update titled ICSA-21-049-02 Mitsubishi Electric FA Engineering Software Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Heap-based Buffer Overflow and Improper Handling of Length Parameter Inconsistency vulnerabilities in various ...
02.08.2022
US CERT (ICS)
Mitsubishi Electric Factory Automation Engineering Products (Update H)
Title
Mitsubishi Electric Factory Automation Engineering Products (Update H)
Published
Aug. 2, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-04
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-20-212-04 Mitsubishi Electric Factory Automation Engineering Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Unquoted Search Path or Element vulnerability in various Mitsubishi Electric Factory Automation ...
July 2022
28.07.2022
US CERT (ICS)
Rockwell Products Impacted by Chromium Type Confusion
Title
Rockwell Products Impacted by Chromium Type Confusion
Published
July 28, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-209-01
Summary
This advisory contains mitigations for a Type Confusion vulnerability in various Rockwell Automation products.
28.07.2022
US CERT (ICS)
Mitsubishi Electric FA Engineering Software (Update B)
Title
Mitsubishi Electric FA Engineering Software (Update B)
Published
July 28, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-350-05
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-350-05 Mitsubishi Electric FA Engineering Software (Update A) that was published December 16, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Out-of-bounds Read and Integer Underflow vulnerabilities in Mitsubishi Electric FA Engineering Software, an engineering ...
28.07.2022
US CERT (ICS)
Mitsubishi Electric Factory Automation Engineering Software (Update C)
Title
Mitsubishi Electric Factory Automation Engineering Software (Update C)
Published
July 28, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-02
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-20-212-02 Mitsubishi Electric Factory Automation Engineering Software (Update B) that was published May 31, 2021, to the ICS webpage on ucisa.gov/ics.

Last Updates

BOSCH PSIRT
21.08.2024
SIEMENS CERT
12.09.2024
US CERT
19.09.2024
US CERT (ICS)
19.09.2024

By Source

Archive

2024
2023
2022
2021
2020
2019
2018
2017

Feeds