The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Sep 8, 2020

Siemens SIMATIC HMI Products

Original release date: September 08, 2020
Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Authentication Bypass by Primary Weakness
4. MITIGATIONS
Siemens is preparing updates and recommends specific countermeasures for products where updates are not yet available. Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Sep 8, 2020

Siemens Industrial Products

Original release date: September 08, 2020
Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor
4. MITIGATIONS
Siemens is preparing updates and recommends the following specific workarounds and mitigations users can apply to reduce the risk until fixes are available.
Click to expand...

ronjor · Sep 8, 2020

Siemens Polarion Subversion Webclient

Original release date: September 08, 2020
Vulnerabilities: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS), Cross-site Request Forgery (CSRF)
4. MITIGATIONS
Siemens has stated that the tool is considered shareware, distributed “as is,” and will be no fix as it is no longer supported.
Siemens has identified the following specific workaround and mitigation users can apply to reduce the risk:
Click to expand...

ronjor · Sep 8, 2020

Wibu-Systems CodeMeter

Original release date: September 08, 2020
Vulnerabilities: Buffer Access with Incorrect Length Value, Inadequate Encryption Strength, Origin Validation Error, Improper Input Validation, Improper Verification of Cryptographic Signature, Improper Resource Shutdown or Release
5. MITIGATIONS
Wibu-Systems recommends the following:
Click to expand...

ronjor · Sep 8, 2020

Siemens UMC Stack (Update B)

Original release date: September 08, 2020
Vulnerabilities: Unquoted Search Path or Element, Uncontrolled Resource Consumption, Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-196-05 Siemens UMC Stack (Update A) that was published August 11, 2020, to the ICS webpage on us-cert.gov
Click to expand...

.

ronjor · Sep 8, 2020

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update C)

Original release date: September 08, 2020
Vulnerability: Unquoted Search Path or Element
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-161-04 Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update B) that was published August 11, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 8, 2020

Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)

Original release date: September 08, 2020
Vulnerabilities: Uncontrolled Resource Consumption, Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-105-05 Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update A) that was published May 12, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 8, 2020

Siemens SCALANCE & SIMATIC (Update B)

Original release date: September 08, 2020
Vulnerability: Resource Exhaustion
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-105-07 Siemens SCALANCE & SIMATIC (Update A) that was published August 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 8, 2020

Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update E)

Original release date: September 08, 2020
Vulnerability: Incorrect Calculation of Buffer Size
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled 20-042-06 Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC that (Update D) was published July 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 8, 2020

Siemens PROFINET Devices (Update H)

Original release date: September 08, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-02 Siemens PROFINET Devices (Update G) that was published August 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 8, 2020

Siemens Industrial Products (Update I)

Original release date: September 08, 2020
Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-253-03 Siemens Industrial Products (Update H) that was published August 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 10, 2020

HMS Networks Ewon Flexy and Cosy

Original release date: September 10, 2020
Vulnerability: Permissive Cross-domain Policy with Untrusted Domains
4. MITIGATIONS
HMS Networks recommends the following mitigations:
Update firmware to the latest version available.
Use secure Talk2M cloud solutions to create a VPN tunnel connecting Ewon devices remotely.
Do not publicly expose the WAN IP of your devices on the internet.
Use the WAN firewall, which is built into all Ewon devices.
Click to expand...

ronjor · Sep 10, 2020

FATEK Automation PLC WinProladder

Original release date: September 10, 2020
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
FATEK has not responded to requests to work with CISA to mitigate this vulnerability. Users of these affected products who would like to see more responsible security are invited to contact Fatek customer support
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Sep 10, 2020

AVEVA Enterprise Data Management Web

Original release date: September 10, 2020
Vulnerability: SQL Injection
4. MITIGATIONS
AVEVA reports that affected users are recommended to upgrade to AVEVA Enterprise Data Management Web v2019 SP1 as soon as possible. If an upgrade to v2019 SP1 is not possible, users can contact AVEVA Global Customer Support, and a hot-fix can be made available for eDNA Web v2018 SP2. Other versions will not be hot-fixed and must be upgraded. For help with applying upgrades and hot-fixes, please contact AVEVA Global Customer Support.
For more information see the AVEVA security bulletin here
Click to expand...

ronjor · Sep 10, 2020

ICS Medical Advisory (ICSMA-20-254-01)
Philips Patient Monitoring Devices

Original release date: September 10, 2020
Vulnerabilities: Improper Neutralization of Formula Elements in a CSV File, Cross-site Scripting, Improper Authentication, Improper Check for Certificate Revocation, Improper Handling of Length Parameter Inconsistency, Improper Validation of Syntactic Correctness of Input, Improper Input Validation, Exposure of Resource to Wrong Sphere
4. MITIGATIONS
Philips plans a new release to remediate all reported vulnerabilities:
As a mitigation to these vulnerabilities, Philips recommends the following:
Click to expand...

ronjor · Sep 15, 2020

ENTTEC Lighting Controllers (Update A)

Original release date: September 15, 2020
Vulnerabilities: Use of Hard-coded Cryptographic Key, Cross-site Scripting, Improper Access Control, Incorrect Permission Assignment for Critical Resource
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-177-01 ENTTEC Lighting Controllers that was published June 25, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 17, 2020

Wibu-Systems CodeMeter (Update A)

Original release date: September 17, 2020
Vulnerabilities: Buffer Access with Incorrect Length Value, Inadequate Encryption Strength, Origin Validation Error, Improper Input Validation, Improper Verification of Cryptographic Signature, Improper Resource Shutdown or Release
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-203-01 Wibu-Systems CodeMeter that was published September 8, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 17, 2020

Advantech WebAccess Node

Original release date: September 17, 2020
Vulnerability: Incorrect Permission Assignment for Critical Resource
4. MITIGATIONS
Advantech has released update 9.0.1 to mitigate this vulnerability.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Sep 17, 2020

ICS Medical Advisory (ICSMA-20-261-01)

Philips Clinical Collaboration Platform
Original release date: September 17, 2020
Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script in Attributes in a Web Page, Protection Mechanism Failure, Algorithm Downgrade, Configuration
Click to expand...

4. MITIGATIONS
Philips released the Clinical Collaboration Platform patch 12.2.1.5 in June 2020 for web portals to remediate CWE-352 and CWE-83.
Philips Clinical Collaboration Platform Version 12.2.5 was released in May 2020 to remediate CWE-16, CWE-352, CWE-83, and CWE-693. Philips requires manual intervention to remediate CWE-757.
Users with questions regarding their specific Philips Clinical Collaboration Platform installations and new release eligibility should contact Philips service support, or regional service support, or call 1-877-328-2808, option 4.
The Philips advisory and the latest security information for Philips products are available at the Philips product security website.
Click to expand...

ronjor · Sep 22, 2020

GE Reason S20 Ethernet Switch

Original release date: September 22, 2020
Vulnerabilities: Cross-site Scripting
4. MITIGATIONS
GE recommends that S20 users upgrade to firmware Version 07A06 or higher to fix this vulnerability. Instructions on how to upgrade the firmware and verify its installation are available in the product user’s manual. Upgrading can be done by downloading the upgrade file directly from the GE website
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Sep 22, 2020

GE Digital APM Classic

Original release date: September 22, 2020
Vulnerabilities: Authorization Bypass Through User-controlled Key, Use of a One-Way Hash Without a Salt
4. MITIGATIONS
GE Digital APM Classic 4.5 contains mitigations for these vulnerabilities. GE Digital recommends all users upgrade to GE Digital APM Classic 4.5 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative
The GE user advisory can be accessed on the GE Digital Support Customer Center website (login required).
Click to expand...

ronjor · Sep 24, 2020

3S CoDeSys (Update A)

Original release date: September 24, 2020
Vulnerabilities: Improper Access Control, Relative Path Traversal
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-13-011-01 3S CoDeSys that was published January 10, 2013, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 29, 2020

MB Connect line mbCONNECT24, mymbCONNECT24

Original release date: September 29, 2020
Vulnerabilities: SQL Injection, Cross-site Request Forgery, Command Injection
4. MITIGATIONS
MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.6.2 or higher.
Additional details can be found on the MB connect line website
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Sep 29, 2020

Yokogawa WideField3

Original release date: September 29, 2020
Vulnerability: Buffer Copy Without Checking Size of Input
4. MITIGATIONS
Yokogawa has prepared revision R4.04 to address this vulnerability and recommends that users switch to this revision.
For more information about this vulnerability and the associated mitigations, please see Yokogawa’s security advisory report YSAR-20-0002
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Sep 29, 2020

B&R Automation SiteManager and GateManager

Original release date: September 29, 2020
Vulnerabilities: Path Traversal, Uncontrolled Resource Consumption, Information Exposure, Improper Authentication, Information Disclosure
4. MITIGATIONS
B&R Industrial Automation reports the vulnerabilities have been fixed in the following versions:
SiteManager v9.2.620236042
GateManager 4260 and 9250 v9.0.20262
GateManager 8250 v9.2.620236042
Click to expand...

The B&R cybersecurity webpage provides further information including cybersecurity guidelines
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches