The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jan 5, 2023

Hitachi Energy FOXMAN-UN 05 Jan 2023

Original release date: January 05, 2023
Vulnerabilities: Inadequate Encryption Strength, Use of Default Cryptographic Key, Use of Hard-coded Cryptographic Key, Cleartext Transmission of Sensitive Information.
Click to expand...

ronjor · Jan 5, 2023

Hitachi Energy Lumada Asset Performance Management 05 Jan 2023

Original release date: January 05, 2023
Vulnerabilities: Classic Buffer Overflow, Out-of-bounds Write
Click to expand...

ronjor · Jan 10, 2023

Black Box KVM

Original release date: January 10, 2023
Vulnerability: Path Traversal
Click to expand...

ronjor · Jan 10, 2023

Delta Electronics InfraSuite Device Master (Update A)

Original release date: October 25, 2022 | Last revised: January 10, 2023
Vulnerabilities: Deserialization of Untrusted Data, Path Traversal, Missing Authentication for Critical Function
Click to expand...

ronjor · Jan 12, 2023

ICS Medical Advisory (ICSMA-21-322-02)
Philips Patient Information Center iX (PIC iX) and Efficia CM Series (Update A)

Original release date: January 12, 2023
Vulnerabilities: Improper Input Validation, Use of Hard-coded Cryptographic Key, Use of a Broken or Risky Cryptographic Algorithm
Click to expand...

ronjor · Jan 12, 2023

Siemens Solid Edge before V2023 MP1

Original release date: January 12, 2023
Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer
Click to expand...

ronjor · Jan 12, 2023

Siemens Automation License Manager

Original release date: January 12, 2023
Vulnerabilities: External Control of File Name or Path, Path Traversal
Click to expand...

ronjor · Jan 12, 2023

Siemens Mendix SAML Module

Original release date: January 12, 2023
Vulnerability: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Click to expand...

ronjor · Jan 12, 2023

Beginning January 10, 2023, CISA will no longer be updating historical security advisories for Siemens product vulnerabilities. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
Click to expand...

Siemens S7-1500 CPU devices

Original release date: January 12, 2023
Vulnerability: Missing Immutable Root of Trust in Hardware
Click to expand...

ronjor · Jan 12, 2023

Hitachi Energy Lumada APM

Original release date: January 12, 2023
Vulnerability: Improper Access Control
Click to expand...

ronjor · Jan 12, 2023

Johnson Controls Metasys

Original release date: January 12, 2023
Vulnerability: Insufficiently Protected Credentials
Click to expand...

ronjor · Jan 12, 2023

SAUTER Controls Nova 200 – 220 Series (PLC 6)

Original release date: January 12, 2023
Vulnerabilities: Missing Authentication for Critical Function, Cleartext Transmission of Sensitive Information
Click to expand...

ronjor · Jan 12, 2023

Panasonic Sanyo CCTV Network Camera

Original release date: January 12, 2023
Vulnerability: Cross-Site Request Forgery (CSRF)
Click to expand...

ronjor · Jan 12, 2023

InHand Networks InRouter

Original release date: January 12, 2023
Vulnerabilities: Cleartext Transmission of Sensitive Information, OS Command Injection, Use of a One-way Hash with a Predictable Salt, Improper Access Control, Use of Insufficiently Random Values
Click to expand...

ronjor · Jan 12, 2023

RONDS Equipment Predictive Maintenance Solution

Original release date: January 12, 2023
Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Path Traversal
Click to expand...

ronjor · Jan 12, 2023

Sewio RTLS Studio

Original release date: January 12, 2023
Vulnerabilities: Use of Hard-coded Password, OS Command Injection, Out-of-bounds Write, Cross-Site Request Forgery, Improper Input Validation, Cross-site Scripting
Click to expand...

ronjor · Jan 17, 2023

GE Digital Proficy Historian 17 Jan 2023

Original release date: January 17, 2023
Vulnerabilities: Authentication Bypass using an Alternate Path or Channel, Unrestricted Upload of File with Dangerous Type, Improper Access Control, Weak Encoding for Password
Click to expand...

ronjor · Jan 17, 2023

Mitsubishi Electric MELSEC iQ-F, iQ-R Series 17 Jan 2023

Original release date: January 17, 2023
Vulnerability: Predictable Seed in Pseudo-Random Number Generator (PRNG)
Click to expand...

ronjor · Jan 17, 2023

Siemens SINEC INS 17 Jan 2023

Original release date: January 17, 2023
Vulnerabilities: OS Command Injection, Inadequate Encryption Strength, Out-of-bounds Write, HTTP Request Smuggling, Inadequate Encryption Strength, Use of Insufficiently Random Values, Authentication Bypass by Spoofing, Path Traversal, Command Injection
Click to expand...

ronjor · Jan 17, 2023

Contec CONPROSYS HMI System (CHS) Update A

Original release date: January 17, 2022 | Last revised: January 17, 2023
Vulnerability: OS Command Injection, Use of Default Credentials, Use of Password Hash Instead of Password for Authentication, Cross-site Scripting, Improper Access Control
Click to expand...

ronjor · Jan 17, 2023

CISA Adds One Known Exploited Vulnerability to Catalog 17 Jan 2023

Original release date: January 17, 2023
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.
Click to expand...

ronjor · Jan 19, 2023

Hitachi Energy PCU400 19 Jan 2023

Original release date: January 19, 2023
Vulnerabilities: Reliance on Uncontrolled Component
Click to expand...

ronjor · Jan 23, 2023

CISA Adds One Known Exploited Vulnerability to Catalog 23 Jan 2023

Original release date: January 23, 2023
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
Click to expand...

This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.
Click to expand...

ronjor · Jan 24, 2023

XINJE XD 24 Jan 2023

Original release date: January 24, 2023
Vulnerabilities: Relative Path Traversal, Uncontrolled Search Path Element
Click to expand...

ronjor · Jan 24, 2023

SOCOMEC MODULYS GP 24 Jan 2023

Original release date: January 24, 2023
Vulnerability: Weak Encoding for Password
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches