The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Mar 10, 2020

Siemens PROFINET Devices (Update D)

Original release date: March 10, 2020
Vulnerability: Uncontrolled Resource Consumption
5. MITIGATIONS
SIMATIC CFU PA: Update to v1.2.0
SIMATIC PROFINET Driver: Update to v2.1SIMATIC ET 200MP IM 155-5 PN BA (incl. SIPLUS variants): Update to v4.2.3SIMATIC ET 200SP IM 155-6 PN HF (incl. SIPLUS variants): Update to v4.2.2SIMATIC ET 200SP IM 155-6 PN/2 HF (incl. SIPLUS variants): Update to v4.2.2SIMATIC ET 200SP IM 155-6 PN/3 HF (incl. SIPLUS variants): Update to v4.2.1SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants): Update to latest versionSIMATIC S7-1200 CPU family (incl. SIPLUS variants): Update to v4.4.0SIMATIC S7-1500 Software Controller: Update to the latest version
Click to expand...

ronjor · Mar 10, 2020

Siemens Industrial Products (Update E)

Original release date: March 10, 2020
Vulnerabilities: Integer Overflow or Wraparound, Uncontrolled Resource Consumption
5. MITIGATIONS
Siemens recommends users follow the specific workarounds and mitigations below. Siemens has also released fixes for the following products:
Click to expand...

ronjor · Mar 10, 2020

Siemens Industrial Products with OPC UA (Update F)

Original release date: March 10, 2020
Vulnerability: Uncaught Exception
5. MITIGATIONS
Siemens currently has updates for the following products:
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update G)

Original release date: March 10, 2020
Vulnerability: Out-of-bounds Read
5. MITIGATIONS
Siemens recommends upgrading to the following firmware updates for the products below:
Click to expand...

ronjor · Mar 10, 2020

Siemens S7-300/400 PLC Vulnerabilities (Update E)

Original release date: March 10, 2020
Vulnerabilities: Information Exposure, Improper Input Validation
5. MITIGATIONS
Siemens provides the following firmware versions to resolve CVE-2016-9158:
Click to expand...

ronjor · Mar 12, 2020

ABB eSOMS

Original release date: March 12, 2020
Vulnerabilities: Use of Web Browser Cache Containing Sensitive Information, Improper Restriction of Rendered UI Layers or Frames, Improper Neutralization of HTTP Headers for Scripting Syntax, Sensitive Cookie Without ‘HttpOnly’ Flag, Protection Mechanism Failure, Sensitive Cookie in HTTPS Session Without ‘Secure’ Attribute, Exposure of Sensitive Information to an Unauthorized Actor, External Control of Critical State Data, Weak Password Requirements, SQL Injection, Cross-site Scripting, Cleartext Storage of Sensitive Information, Inadequate Encryption Strength
4. MITIGATIONS
ABB recommends users update their version of eSOMS to 6.0.3 or 6.1.
Click to expand...

ronjor · Mar 12, 2020

ABB Asset Suite

Original release date: March 12, 2020
Vulnerability: Authorization Bypass Through User-Controlled Key
4. MITIGATIONS
ABB recommends users apply the update as soon as they are able. The following updates mitigate this vulnerability:
Click to expand...

ronjor · Mar 12, 2020

Rockwell Automation Allen-Bradley Stratix 5950

Original release date: March 12, 2020
Vulnerability: Improper Access Control
4. MITIGATIONS
Rockwell Automation recommends users update to firmware version FRN v6.4.0, which addresses the reported vulnerability.
Rockwell also provides the following general security guidelines:
Click to expand...

ronjor · Mar 17, 2020

Delta Electronics Industrial Automation CNCSoft ScreenEditor

Original release date: March 17, 2020
Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read
4. MITIGATIONS
Delta recommends the following:
Update to the latest version of CNCSoft v1.01.24 (with ScreenEditor v1.00.98 )
Restrict the interaction with the application to trusted files.
Click to expand...

ronjor · Mar 19, 2020

Systech NDS-5000 Terminal Server

Original release date: March 19, 2020
Vulnerability: Cross-site Scripting
4. MITIGATIONS
Systech released firmware Version 02F.6
that eliminates this vulnerability. For further information on installing this update, contact Systech Technical Support at support@systech.com.
Click to expand...

ronjor · Mar 19, 2020

ICS Medical Advisory (ICSMA-20-079-01)
Insulet Omnipod
Original release date: March 19, 2020

Vulnerability: Improper Access Control
4. MITIGATIONS
Insulet recommends patients using the affected products talk to their healthcare provider about the risks of continued use, including the possibility of changing to the latest model with increased cybersecurity protection.
Additionally, Insulet recommends all patients take the cybersecurity precautions indicated below.
Click to expand...

ronjor · Mar 24, 2020

VISAM Automation Base (VBASE)

Original release date: March 24, 2020
Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow
4. MITIGATIONS
VISAM has not yet responded to provide mitigations for these vulnerabilities.
For more information about these vulnerabilities and how VISAM plans to address them, please contact VISAM using the information provided on their contact page (German language).
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Mar 24, 2020

Schneider Electric IGSS SCADA Software

Original release date: March 24, 2020
Vulnerabilities: Path Traversal, Missing Authentication for Critical Function
4. MITIGATIONS
Schneider Electric has provided IGSS14 Version 14.0.0.20009 to address these vulnerabilities. Users are recommended to update to IGSS Version 14.
Alternatively, the following workarounds and mitigations can be applied to reduce risk:
Click to expand...

ronjor · Mar 26, 2020

Advantech WebAccess

Original release date: March 26, 2020
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
Advantech has released Version 8.4.4 of WebAccessNode to address the reported vulnerability.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Mar 31, 2020

Schneider Electric Modicon Controllers (Update A)

Original release date: March 31, 2020
Vulnerability: Improper Check for Unusual or Exceptional Conditions
5. MITIGATIONS
Schneider Electric has developed the following mitigations:
Specific Modicon M580 firmware v3.10 is available at:
Click to expand...

ronjor · Mar 31, 2020

Mitsubishi Electric MELSEC

Original release date: March 31, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
In the user manual for this device, Mitsubishi Electric recommends implementing one or both of the following:
Install a firewall.
Use the IP filter function to restrict the connectable IP addresses.
Additional information about the vulnerability is available by contacting a Mitsubishi Electric representative
Click to expand...

ronjor · Mar 31, 2020

Hirschmann Automation and Control HiOS and HiSecOS Products

Original release date: March 31, 2020
Vulnerability: Classic Buffer Overflow
4. MITIGATIONS
Hirschmann recommends updating HiOS products to Version 07.0.03 or higher and HiSecOS products to Version 03.3.00 or higher.
Hirschmann also recommends, as a workaround, users either use the “IP Access Restriction” feature to restrict HTTP and HTTPS to trusted IP addresses, or disable the HTTP and HTTPS server.
For more information regarding this vulnerability and the associated mitigations, please see Belden security bulletin number BSECV-2020-01
Click to expand...

ronjor · Mar 31, 2020

ICS Medical Advisory (ICSMA-20-091-01)

BD Pyxis MedStation and Pyxis Anesthesia (PAS) ES System
Original release date: March 31, 2020
Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
BD recommends the following mitigations and compensating controls in order to reduce risk associated with this vulnerability:
Click to expand...

ronjor · Apr 2, 2020

B&R Automation Studio

Original release date: April 02, 2020
Vulnerabilities: Improper Privilege Management, Missing Required Cryptographic Step, Path Traversal
4. MITIGATIONS
B&R recommends applying product updates at the earliest convenience. Users of Automation Studio
Click to expand...

ronjor · Apr 7, 2020

Synergy Systems & Solutions HUSKY RTU (Update A)

Original release date: April 07, 2020
ATTENTION: Exploitable remotely/low skill level to exploit
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-01 Synergy Systems & Solutions HUSKY RTU that was published February 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Apr 7, 2020

KUKA.Sim Pro

Original release date: April 07, 2020
Vulnerability: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
4. MITIGATIONS
KUKA recommends upgrading KUKA.Sim Pro to Version 3.1.2 or above to mitigate this vulnerability. The update is provided for users with a licensed Version 3.1. Version 3.1 is the only affected version that is still maintained. All previous versions of KUKA.Sim Pro have been discontinued; Version 3.0 has been discontinued since the beginning of 2019.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 7, 2020

Fuji Electric V-Server Lite

Original release date: April 07, 2020
Vulnerability: Heap-based Buffer Overflow
4. MITIGATIONS
Fuji Electric has released Version 4.0.9.0 to mitigate the reported vulnerability. The new version can be obtained at the Fuji Electric Library website.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 7, 2020

HMS Networks eWON Flexy and Cosy

Original release date: April 07, 2020
Vulnerability: Cross-site Scripting
4. MITIGATIONS
HMS Networks recommends users update to latest firmware, Version 14.1s0
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 7, 2020

GE Digital CIMPLICITY

Original release date: April 07, 2020
Vulnerability: Improper Privilege Management
4. MITIGATIONS
GE Digital CIMPLICITY v11.0, released January 2020, contains mitigation for this local privilege escalation vulnerability. GE Digital recommends all users upgrade to GE CIMPLICITY v11.0 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative.
GE Digital provides guidance for users to secure systems, and advises that users running CIMPLICITY adhere to the Secure Deployment Guide found on GE Digital’s customer center
(requires logon).
Click to expand...

ronjor · Apr 7, 2020

Advantech WebAccess/NMS

Original release date: April 07, 2020
Vulnerabilities: Unrestricted Upload of File with Dangerous Type, SQL Injection, Relative Path Traversal, Missing Authentication for Critical Function, Improper Restriction of XML External Entity Reference, OS Command Injection
4. MITIGATIONS
Advantech recommends updating to Version 3.0.2
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches