The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Dec 1, 2020

Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)

Original release date: December 01, 2020
Vulnerability: Improper Privilege Management
4. MITIGATIONS
Schneider Electric has prepared Version 3.1 Service Pack 1B of the EcoStruxure Operator Terminal Expert
product with a fix for this vulnerability. This fix is also available through Schneider Electric Software Update (SESU)
If users choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
Click to expand...

ronjor · Dec 3, 2020

Wibu-Systems CodeMeter (Update D)

Original release date: December 03, 2020
Vulnerabilities: Buffer Access with Incorrect Length Value, Inadequate Encryption Strength, Origin Validation Error, Improper Input Validation, Improper Verification of Cryptographic Signature, Improper Resource Shutdown or Release
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-203-01 Wibu-Systems CodeMeter (Update C) that was published October 15, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 3, 2020

National Instruments CompactRIO

Original release date: December 03, 2020
Vulnerability: Incorrect Permission Assignment for Critical Resource
4. MITIGATIONS
NI recommends the following steps for mitigation:
Click to expand...

ronjor · Dec 3, 2020

WECON LeviStudioU (Update C)

Original release date: December 13, 2020 | Last revised: December 03, 2020
Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of XML External Entity Reference, Heap-based Buffer Overflow
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-238-03 WECON LeviStudioU (Update B) that was published October 29, 2020, to the ICS webpage on us-cert.cisa.gov.
Click to expand...

ronjor · Dec 8, 2020

GE Healthcare Imaging and Ultrasound Products

Original release date: December 08, 2020
Vulnerabilities: Unprotected Transport of Credentials, Exposure of Sensitive System Information to an Unauthorized Control Sphere
Click to expand...

4. MITIGATIONS
GE has identified mitigations for specific products and releases and will take proactive measures to ensure proper configuration of the product firewall protection and change default passwords on impacted devices where possible. GE recommends users refer to the GE Healthcare Product Security Portal
for more details on mitigations and how proactive actions may apply to affected devices.
In addition to the product specific recommendations, GE recommends utilizing clinical network security best practices. Suggested clinical best practices include:
Click to expand...

ronjor · Dec 8, 2020

Multiple Embedded TCP/IP Stacks

Original release date: December 08, 2020
Vulnerabilities: Infinite Loop, Integer Wraparound, Out-of-bounds Read, Integer Overflow, Out-of-bounds Write, Improper Input Validation, Improper Null Termination
4. MITIGATIONS
See link.
Click to expand...

ronjor · Dec 8, 2020

Mitsubishi Electric GOT and Tension Controller

Original release date: December 08, 2020
Vulnerability: Out-of-bounds Read
4. MITIGATIONS
Mitsubishi Electric will release a fixed version in the near future. Until then, they ask that users restrict access to the product only from trusted networks and hosts.
Please refer to the Mitsubishi Electric website
for details.
Click to expand...

ronjor · Dec 8, 2020

Schneider Electric Easergy T300

Original release date: December 08, 2020
Vulnerability: Missing Authentication for Critical Function, Missing Authorization, Missing Encryption of Sensitive Data, Improper Restriction of Rendered UI Layers or Frames
Click to expand...

4. MITIGATIONS
Schneider Electric recommends users upgrade to v2.7.1, which is available from the Schneider Electric Customer Care Center. Alternatively, users may disable port forwarding in the product firewall.
Schneider Electric strongly recommends the following industry cybersecurity best practices:
Click to expand...

ronjor · Dec 8, 2020

Schneider Electric Modicon M221 Programmable Logic Controller

Original release date: December 08, 2020
Vulnerabilities: Inadequate Encryption Strength, Small Space of Random Values, Missing Encryption of Sensitive Data, Exposure of Sensitive Information, Use of a One-Way Hash with a Predictable Salt
4. MITIGATIONS
Schneider Electric recommends users to apply the following mitigations to help reduce the risk of exploit:
Click to expand...

ronjor · Dec 8, 2020

Siemens Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33)

Original release date: December 08, 2020
Vulnerability: Integer Overflow
Daniel dos Santos, Stanislav Dashevskyi, Jos Wetzels, and Amine Amri of Forescout Research Labs reported this vulnerability to CISA.
4. MITIGATIONS
See link.
Click to expand...

ronjor · Dec 8, 2020

Siemens XHQ Operations Intelligence

Original release date: December 08, 2020
Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Cross-site Scripting, Basic XSS, SQL Injection, Relative Path Traversal, Cross-site Request Forgery
4. MITIGATIONS
Siemens recommends updating the XHQ Operations Intelligence product line to the newest version:
Click to expand...

ronjor · Dec 8, 2020

Siemens SICAM A8000 RTUs

Original release date: December 08, 2020
Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
Siemens recommends users update to the latest version, v16. Siemens also recommends users configure the browser to accept only secure ciphers.
Click to expand...

ronjor · Dec 8, 2020

Siemens Products using TightVNC

Original release date: December 08, 2020
Vulnerabilities: Heap-based Buffer Overflow, NULL Pointer Dereference, Classic Buffer Overflow
4. MITIGATIONS
Siemens has released updates for several affected products, is working on updates for the remaining affected products and recommends specific countermeasures until fixes are available:
Click to expand...

ronjor · Dec 8, 2020

Siemens SIMATIC Controller Web Servers

Original release date: December 08, 2020
Vulnerability: Uncaught Exception
4. MITIGATIONS
Siemens has released updates for the affected products and recommends updating to the latest version:
Click to expand...

ronjor · Dec 8, 2020

Siemens LOGO! 8 BM

Original release date: December 08, 2020
Vulnerabilities: Missing Authentication for Critical Function, Use of Hard-coded Cryptographic Key, Use of a Broken or Risky Cryptographic Algorithm, Insufficiently Protected Credentials
4. MITIGATIONS
Siemens has released updates for the affected products and recommends users update to the latest versions:
Click to expand...

ronjor · Dec 8, 2020

Siemens SIMATIC S7-300 and S7-400 CPUs (Update C)

Original release date: December 08, 2020
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-252-02 Siemens SIMATIC S7-300 and S7-400 CPUs (Update B) that was published November 10, 2020, to the ICS webpage on us-cert.cisa.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens Industrial Products (Update B)

Original release date: December 08, 2020
Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-252-07 Siemens Industrial Products (Update A) that was published October 13, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens SIMATIC, SIMOTICS (Update A)

Original release date: December 08, 2020
Vulnerability: TOCTOU Race Condition
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-224-05 Siemens SIMATIC, SIMOTICS that was published August 11, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens UMC Stack (Update D)

Original release date: December 08, 2020
Vulnerabilities: Unquoted Search Path or Element, Uncontrolled Resource Consumption, Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-196-05 Siemens UMC Stack (Update C) that was published November 10, 2020, to the ICS webpage on us-cert.cisa.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens LOGO! (Update A)

Original release date: December 08, 2020
Vulnerability: Missing Authentication for Critical Function
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-161-03 Siemens LOGO! that was published June 9, 2020, to the ICS webpage on us-cert.gov
Click to expand...

ronjor · Dec 8, 2020

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update D)

Original release date: December 08, 2020
Vulnerability: Unquoted Search Path or Element
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-161-04 Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update C) that was published September 8, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens SIMATIC, SINAMICS (Update B)

Original release date: December 08, 2020
Vulnerabilities: Uncontrolled Search Path Element, Heap-based Buffer Overflow
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-161-05 Siemens SIMATIC, SINAMICS (Update A) that was published July 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens PROFINET-IO Stack (Update C)

Original release date: December 08, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-042-04 Siemens PROFINET-IO Stack (Update B) that was published August 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens Industrial Products (Update K)

Original release date: December 08, 2020
Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-253-03 Siemens Industrial Products (Update J) that was published October 13, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Dec 8, 2020

Siemens LOGO! Soft Comfort (Update A)

Original release date: December 08, 2020
Vulnerability: Deserialization of Untrusted Data
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-134-03 Siemens LOGO! Soft Comfort that was published May 14, 2019, on the ICS webpage on us-cert.cisa.gov.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches