December 2018
13.12.2018
US CERT (ICS)
Geutebrueck GmbH E2 Series IP Cameras
Title
Geutebrueck GmbH E2 Series IP Cameras
Published
Dec. 13, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-347-03
Summary
This advisory includes mitigation recommendations for an OS Command Injection vulnerability in Geutebruck GmbH E2 Series IP Cameras.
13.12.2018
US CERT (ICS)
GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e
Title
GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e
Published
Dec. 13, 2018, 3:55 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-347-04
Summary
This advisory contains mitigations for a path traversal vulnerability in GE's Mark VIe, EX2100e, EX2100e_Reg, and LS2100e distributed control systems.
11.12.2018
US CERT (ICS)
McAfee SINAMICS PERFECT HARMONY GH180
Title
McAfee SINAMICS PERFECT HARMONY GH180
Published
Dec. 11, 2018, 4:05 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-345-01
Summary
This advisory contains mitigations for an improper access control vulnerability in McAfee's SINAMICS PERFECT HARMONY GH180 human-machine interface drives.
11.12.2018
US CERT (ICS)
Siemens SINUMERIK Controllers
Title
Siemens SINUMERIK Controllers
Published
Dec. 11, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-345-02
Summary
This advisory includes mitigations for heap-based buffer overflow, integer overflow or wraparound, protection mechanism failure, permissions, privileges, and access controls, stack-based buffer overflow, uncaught exception vulnerabilities in the Siemens SINUMERIK Controllers software.
06.12.2018
US CERT (ICS)
Philips HealthSuite Health Android App
Title
Philips HealthSuite Health Android App
Published
Dec. 6, 2018, 4:10 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSMA-18-340-01
Summary
This advisory includes mitigations for an inadequate encryption strength vulnerability in Philips HealthSuite Health Android App.
06.12.2018
US CERT (ICS)
GE Proficy GDS
Title
GE Proficy GDS
Published
Dec. 6, 2018, 4:05 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-340-01
Summary
This advisory contains mitigations for an improper restriction of XML external entity reference vulnerability in GE's Proficy GDS.
06.12.2018
US CERT (ICS)
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules
Title
Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules
Published
Dec. 6, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-310-02
Summary
This advisory contains mitigations for a missing authentication vulnerability in the Rockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules.
04.12.2018
US CERT (ICS)
SpiderControl SCADA WebServer
Title
SpiderControl SCADA WebServer
Published
Dec. 4, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-338-02
Summary
This advisory includes mitigations for a reflected cross-site scripting vulnerability in SpiderControl's SCADA WebServer software management platform.
November 2018
29.11.2018
US CERT (ICS)
INVT Electric VT-Designer
Title
INVT Electric VT-Designer
Published
Nov. 29, 2018, 6 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-331-01-0
Summary
This advisory includes mitigations for deserialization of untrusted data and heap-based buffer overflow vulnerabilities in INVT Electric's VT-Designer.
27.11.2018
US CERT (ICS)
AVEVA Vijeo Citect and Citect SCADA
Title
AVEVA Vijeo Citect and Citect SCADA
Published
Nov. 27, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-331-01
Summary
This advisory includes mitigations for an uncontrolled search path element vulnerability in Schneider Electric's Software Update utility affecting AVEVA's Vijeo Citect and Citect SCADA products.
20.11.2018
US CERT (ICS)
Teledyne DALSA Sherlock
Title
Teledyne DALSA Sherlock
Published
Nov. 20, 2018, 4:05 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-324-01
Summary
This advisory includes mitigations for a stack-based buffer overflow vulnerability in Teledyne DALSA's Sherlock machine vision software interface.
13.11.2018
US CERT (ICS)
Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC
Title
Siemens IEC 61850 System Configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC
Published
Nov. 13, 2018, 4:35 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-01
Summary
This advisory includes mitigations for an improper access control vulnerability in the Siemens IEC 61850 system configurator, DIGSI 5, DIGSI 4, SICAM PAS/PQS, SICAM PQ Analyzer, and SICAM SCC products.
13.11.2018
US CERT (ICS)
Siemens S7-400 CPUs
Title
Siemens S7-400 CPUs
Published
Nov. 13, 2018, 4:30 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-02
Summary
This advisory includes mitigations for improper input validation vulnerabilities in the Siemens S7-400 CPUs.
13.11.2018
US CERT (ICS)
Siemens SIMATIC Panels and SIMATIC WinCC (TIA Portal)
Title
Siemens SIMATIC Panels and SIMATIC WinCC (TIA Portal)
Published
Nov. 13, 2018, 4:25 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-03
Summary
This advisory includes mitigations for a code injection vulnerability in the Siemens SIMATIC Panels software and SIMATIC WinCC (TIA Portal).
13.11.2018
US CERT (ICS)
Siemens SCALANCE S
Title
Siemens SCALANCE S
Published
Nov. 13, 2018, 4:20 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-04
Summary
This advisory includes mitigations for a cross-site scripting vulnerability in Siemens' SCALANCE S security appliance.
13.11.2018
US CERT (ICS)
Siemens SIMATIC S7
Title
Siemens SIMATIC S7
Published
Nov. 13, 2018, 4:15 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-05
Summary
This advisory includes mitigations for a resource exhaustion vulnerability in Siemens' Simatic S7 controllers.
13.11.2018
US CERT (ICS)
Siemens SIMATIC STEP 7 (TIA Portal)
Title
Siemens SIMATIC STEP 7 (TIA Portal)
Published
Nov. 13, 2018, 4:10 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-06
Summary
This advisory includes mitigations for an unprotected storage of credentials vulnerability in Siemens' SIMATIC STEP 7 engineering software.
13.11.2018
US CERT (ICS)
Siemens SIMATIC IT Production Suite
Title
Siemens SIMATIC IT Production Suite
Published
Nov. 13, 2018, 4:05 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-07
Summary
This advisory includes mitigations for an improper authentication vulnerability in Siemens' SIMATIC IT Production Suite software.
13.11.2018
US CERT (ICS)
Siemens SIMATIC Panels
Title
Siemens SIMATIC Panels
Published
Nov. 13, 2018, 4 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-317-08
Summary
This advisory includes mitigations for path traversal and open redirect vulnerabilities in Siemens' SIMATIC panels.
08.11.2018
US CERT (ICS)
Philips iSite and IntelliSpace PACS
Title
Philips iSite and IntelliSpace PACS
Published
Nov. 8, 2018, 3:31 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSMA-18-312-01
Summary
This medical device advisory includes mitigations for a weak password Requirements vulnerability in the Philips iSite and IntelliSpace PACS.
06.11.2018
US CERT (ICS)
Roche Point of Care Handheld Medical Devices
Title
Roche Point of Care Handheld Medical Devices
Published
Nov. 6, 2018, 5:08 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01
Summary
This medical device advisory includes mitigations for improper authentication, OS command injection, unrestricted upload of file with dangerous type, and improper access control vulnerabilities in Roche's Point of Care handheld medical devices.
06.11.2018
US CERT (ICS)
Roche Diagnostics Point of Care Handheld Medical Devices (Update A)
Title
Roche Diagnostics Point of Care Handheld Medical Devices (Update A)
Published
Nov. 6, 2018, 5:08 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSMA-18-310-01
Summary
This updated medical device advisory is a follow-up to the original advisory titled ICSMA-18-310-01 Roche Point of Care Handheld Medical Devices that was published November 6, 2018 on the NCCIC/ICS-CERT website. This updated medical device advisory includes mitigations for improper authentication, OS command injection, unrestricted upload of file with dangerous ...
01.11.2018
US CERT (ICS)
AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)
Title
AVEVA InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition)
Published
Nov. 1, 2018, 3:15 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-01
Summary
This advisory includes mitigations for stack-based buffer overflow and empty password in configuration file vulnerabilities in AVEVA’s InduSoft Web Studio and InTouch Edge HMI (formerly InTouch Machine Edition) products.
01.11.2018
US CERT (ICS)
Schneider Electric Software Update (SESU)
Title
Schneider Electric Software Update (SESU)
Published
Nov. 1, 2018, 3:10 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02
Summary
This advisory includes mitigations for a DLL hijacking vulnerability in the Schneider Electric Software Update (SESU).
01.11.2018
US CERT (ICS)
Schneider Electric Software Update (SESU) (Update A)
Title
Schneider Electric Software Update (SESU) (Update A)
Published
Nov. 1, 2018, 3:10 p.m.
URL
https://ics-cert.us-cert.gov/advisories/ICSA-18-305-02
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-18-305-02 Schneider Electric Software Update that was published November 1, 2018, on the NCCIC/ICS-CERT website. This updated advisory includes mitigations for a DLL hijacking vulnerability in the Schneider Electric Software Update (SESU).

Last Updates

BOSCH PSIRT
25.04.2025
SIEMENS CERT
23.05.2025
US CERT
20.05.2025
US CERT (ICS)
29.05.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds