The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jan 25, 2018

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update I)

Original release date: May 09, 2017 | Last revised: January 25, 2018
UPDATE INFORMATION

This updated advisory is a follow-up to the updated advisory titled ICSA-17-129-02H Siemens devices using the PROFINET Discovery and Configuration Protocol that was published January 18, 2018, on the NCCIC/ICS-CERT web site.
Click to expand...

ronjor · Jan 25, 2018

Siemens S7-300/400 PLC Vulnerabilities (Update D)

Original release date: December 13, 2016 | Last revised: January 25, 2018
OVERVIEW
This updated advisory is a follow-up to the updated advisory titled ICSA-16-348-05C Siemens S7-300/400 PLC Vulnerabilities that was published November 28, 2017, on the NCCIC/ICS-CERT web site.
Zhu WenZhe from Beijing Acorn Network Technology has identified password leak and denial-of-service (DoS) vulnerabilities in Siemens’ S7-300 and S7-400 programmable logic controllers (PLCs). Siemens has released Security Advisory SSA-731239 with advice to mitigate these vulnerabilities.
Click to expand...

ronjor · Jan 25, 2018

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update G)

Original release date: November 08, 2016 | Last revised: January 25, 2018
OVERVIEW
This updated advisory is a follow-up to the updated advisory titled ICSA-16-313-02F Siemens Industrial Products Local Privilege Escalation Vulnerability that was published June 20 2017, on the NCCIC/ICS-CERT web site.
Siemens has released an advisory to inform its users how to mitigate a privilege escalation vulnerability that affects several of its industrial products. This vulnerability was reported directly to Siemens by WATERSURE and KIANDRA IT. Siemens has produced updates for several products and a temporary fix for the remaining affected products to mitigate this vulnerability.
Click to expand...

ronjor · Jan 30, 2018

Siemens TeleControl Server Basic

Original release date: January 30, 2018
MITIGATION

Siemens recommends that users install the latest version of TeleControl Server Basic which can be found at:
Click to expand...

ronjor · Jan 30, 2018

PHOENIX CONTACT mGuard

Original release date: January 30, 2018
MITIGATION

PHOENIX CONTACT recommends that affected users upgrade to firmware version 8.6.1
Click to expand...

ronjor · Jan 30, 2018

Meltdown and Spectre Vulnerabilities (Update C)

Original release date: January 11, 2018 | Last revised: January 30, 2018
The following product vendors have reported that they support products that use affected CPUs and have issued customer notifications with recommendations for users (NCCIC will update the list of vendors that have released customer notifications as additional information becomes available):
Click to expand...

Minimalist · Jan 31, 2018

Cisco ASA software is affected by a flaw with 10 out of 10 severity rating. Patch it asap

Cisco addressed a critical security flaw, tracked as CVE-2018-0101, in Adaptive Security Appliance (ASA) software.

The vulnerability could be exploited by a remote and unauthenticated attacker to execute arbitrary code or trigger a denial-of-service (DoS) condition causing the reload of the system.
Click to expand...

https://securityaffairs.co/wordpress/68424/security/cisco-asa-critical-flaw.html

ronjor · Feb 1, 2018

Fuji Electric V-Server VPR

Original release date: February 01, 2018
MITIGATION

Fuji Electric has produced firmware 4.0.3.0 that can be obtained from:
Click to expand...

ronjor · Feb 1, 2018

3S-Smart Software Solutions GmbH CODESYS Web Server

Original release date: February 01, 2018
MITIGATION

This vulnerability will be fixed by patch V.1.1.9.19 for the CODESYS V2.3 web server for Windows. This will be part of the CODESYS setup V2.3.9.56. The release of this security patch was made available on January 30, 2018.
Click to expand...

ronjor · Feb 1, 2018

Gemalto Sentinel License Manager
Original release date: February 01, 2018
MITIGATION

Gemalto recommends users who have Sentinel LDK run-time environment (RTE) Version 2.10 through Version 7.54 update to Sentinel LDK RTE component Version 7.6, or the latest version. The update was available as of July 2017 and can be found at the following locati
Click to expand...

on:

ronjor · Feb 1, 2018

NXP Semiconductors MQX RTOS (Update A)

Original release date: October 12, 2017 | Last revised: February 01, 2018
UPDATE INFORMATION

This updated advisory is a follow-up to the original advisory titled ICSA-17-285-04 NXP Semiconductors MQX RTOS that was published October 12, 2017, on the NCCIC/ICS-CERT web site.
Click to expand...

ronjor · Feb 6, 2018

Vyaire Medical CareFusion Upgrade Utility Vulnerability

Original release date: February 06, 2018
MITIGATION
Vyaire Medical is no longer supporting the CareFusion Upgrade Utility v2.0.2.2 and recommends that users upgrade to the newer Vyaire Upgrade Utility v2.0.3.0. This updated Upgrade Utility will not install on Windows XP and will require updating the underlying system to Windows 7 or later.
Vyaire Medical has released a Product Security Bulletin, available at the following URL:
Click to expand...

ronjor · Feb 6, 2018

Siemens Desigo PXC (Update A)

Original release date: January 25, 2018 | Last revised: February 06, 2018
UPDATE INFORMATION

This updated advisory is a follow-up to the original advisory titled ICSA-18-025-02 Siemens Desigo PXC that was published January 25, 2018, on the NCCIC/ICS-CERT web site.
Click to expand...

Minimalist · Feb 8, 2018

For the second time CISCO issues security patch to fix a critical vulnerability in CISCO ASA

Further investigation of the flaw revealed additional attack vectors, for this reason, the company released a new update. The researchers also found a denial of service issue affecting Cisco ASA platforms.

“After broadening the investigation, Cisco engineers found other attack vectors and features that are affected by this vulnerability that were not originally identified by the NCC Group and subsequently updated the security advisory,” reads a blog post published by Cisco.
Click to expand...

https://securityaffairs.co/wordpress/68826/security/cisco-asa-flaw.html

ronjor · Feb 13, 2018

Exploring a New Reference Architecture for Industrial Control Systems Security

By Galina Antova on February 13, 2018
We Need a New Framework for Thinking About ICS and Critical Infrastructure Network Security
Click to expand...

ronjor · Feb 13, 2018

Schneider Electric IGSS SCADA Software

Original release date: February 13, 2018
MITIGATION
Schneider Electric has provided IGSS SCADA Software V13 to address this vulnerability. Users are recommended to update to V13 using the following link.
Click to expand...

ronjor · Feb 13, 2018

WAGO PFC200 Series

Original release date: February 13, 2018
MITIGATION

WAGO released a security patch with FW11 available at:
Click to expand...

ronjor · Feb 15, 2018

Nortek Linear eMerge E3 Series

Original release date: February 15, 2018
IMPACT
Successful exploitation of this vulnerability could allow a remote attacker to execute malicious code on the system with elevated privileges, allowing for full control of the server.
MITIGATION
Nortek recommends that affected users upgrade by following the process outlined on Page 47 of the E3 User Programming Guide.
Click to expand...

ronjor · Feb 15, 2018

GE D60 Line Distance Relay

Original release date: February 15, 2018
IMPACT
Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on the device.
MITIGATION
GE has released firmware that addresses the vulnerabilities. The latest firmware can be obtained from:
Click to expand...

ronjor · Feb 15, 2018

Schneider Electric IGSS Mobile

Original release date: February 15, 2018
IMPACT
Successful exploitation of these vulnerabilities could allow an attacker to execute a man-in-the-middle attack. In addition, passwords can be accessed by unauthorized users.
MITIGATION
An update for Android with the fix for these vulnerabilities is available for download on Google Play:
Click to expand...

ronjor · Feb 15, 2018

Schneider Electric StruxureOn Gateway

Original release date: February 15, 2018
IMPACT
Successful exploitation of this vulnerability could allow a remote attacker to upload a malicious file to any directory on the device, which could lead to remote code execution.
MITIGATION
Schneider Electric has released a new version of the software located at:
Click to expand...

ronjor · Feb 17, 2018

ABB TropOS (Update A)

Original release date: November 14, 2017 | Last revised: February 15, 2018
UPDATE INFORMATION

This updated advisory is a follow-up to the original advisory titled ICSA-17-318-02 ABB TropOS that was published November 14, 2017, on the NCCIC/ICS-CERT website.
Click to expand...

Minimalist · Feb 18, 2018

Plague of the Cyber RATs: How a toxic computer code delivered by 'Remote Access Trojans' is an invisible army able to take over a petrochemical plant and blow it to pieces

On a broiling day last August, managers of a huge petrochemical plant in Saudi Arabia discovered to their horror that it had been attacked. The consequences could have been catastrophic: the invaders had seized command of its computerised control-and-safety system, and had the power to damage it severely.

The attackers carried no guns, explosives, or conventional weapons. Yet they could have blown up the plant – its exact location remains a secret – from thousands of miles away, killing its workers, crippling the local economy and poisoning the surrounding region.

For they were computer hackers, and their weapon, dubbed both ‘Triton’ and ‘Trisis’ by security experts, was a piece of malware, a malicious software program.
Click to expand...

http://www.dailymail.co.uk/news/art...ng-RAT-malware-seized-petrochemical-site.html

ronjor · Feb 20, 2018

ronjor said: ↑

Meltdown and Spectre Vulnerabilities
Click to expand...

Meltdown and Spectre Vulnerabilities (Update D)

Original release date: January 11, 2018 | Last revised: February 20, 2018
SUMMARY
This updated alert is a follow-up to the updated alert titled ICS-ALERT-18-011-01C Meltdown and Spectre Vulnerabilities that was published January 30, 2018, on the NCCIC/ICS-CERT web site.
Click to expand...

ronjor · Feb 20, 2018

ABB netCADOPS Web Application

Original release date: February 20, 2018
IMPACT
Successful exploitation of this vulnerability could allow critical information about the database to be exposed.
MITIGATION
ABB has released the following product updates to mitigate the vulnerability:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

ronjor Global Moderator

Useful Searches