The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · May 3, 2018

Nari PCS-9611 (Update A)

Original release date: January 25, 2018 | Last revised: May 03, 2018
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-025-01 Nari PCS-9611 that was published January 25, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · May 3, 2018

Schneider Electric Triconex Tricon (Update A)

Original release date: April 17, 2018 | Last revised: May 03, 2018
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-107-02 Schneider Electric Triconex Tricon that was published April 17, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · May 8, 2018

Silex Technology SX-500/SD-320AN or GE Healthcare MobileLink

Original release date: May 08, 2018
4. MITIGATIONS

Silex Technologies and GE Healthcare recommend the following mitigations:
Click to expand...

ronjor · May 8, 2018

Siemens Medium Voltage SINAMICS Products

Original release date: May 08, 2018
4. MITIGATIONS

Siemens recommends users implement the following updates. These updates can be obtained from a Siemens representative or via Siemens customer service.
Click to expand...

ronjor · May 8, 2018

Siemens Siveillance VMS

Original release date: May 08, 2018
4. MITIGATIONS

Siemens has released updates for several affected products and recommends users update to the new version.
Click to expand...

ronjor · May 8, 2018

Siemens Siveillance VMS Video Mobile App

Original release date: May 08, 2018
4. MITIGATIONS

Siemens has provided the following updates and recommends that all users update to the newest version:
Click to expand...

ronjor · May 10, 2018

Siemens SCALANCE W1750D, M800, and S615 (Update B)

Original release date: November 28, 2017 | Last revised: May 10, 2018
2. UPDATE INFORMATION

This updated advisory is a follow-up to the updated advisory titled ICSA-17-332-01 Siemens SCALANCE W1750D, M800, and S615 that was published April 5, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · May 10, 2018

MatrikonOPC Explorer

Original release date: May 10, 2018
4. MITIGATIONS

MatrikonOPC has made fixes available to resolve this vulnerability through a patch:
Click to expand...

ronjor · May 10, 2018

Rockwell Automation Arena

Original release date: May 10, 2018
4. MITIGATIONS

Rockwell Automation encourages affected users to upgrade to the latest version of Arena software, v15.10.01 or later, which can be obtained from (login required):
Click to expand...

ronjor · May 10, 2018

Rockwell Automation FactoryTalk

Original release date: May 10, 2018
5. MITIGATIONS

Rockwell Automation recommends users with affected versions of CodeMeter and/or FlexNet Publisher that were installed with FactoryTalk Activation Manager to update Factory Talk Activation Manager to v4.02. If unable to update FactoryTalk Activation Manager to v4.02, update CodeMeter to a compatible version of CodeMeter that is compatible with FactoryTalk Activation Manager.
Rockwell Automation also encourages users to combine the updates above with these general security guidelines to employ multiple strategies simultaneously.
Click to expand...

ronjor · May 15, 2018

Advantech WebAccess

Original release date: May 15, 2018
4. MITIGATIONS
Advantech has released Version 8.3.1 of WebAccess to address the reported vulnerabilities. Users can download the latest version of WebAccess at the following location:
Click to expand...

guest · May 15, 2018

Severe DoS Flaw Discovered in Siemens SIMATIC PLCs
Siemens informed customers on Tuesday that some of its SIMATIC S7-400 CPUs are affected by a high severity denial-of-service (DoS) vulnerability.
May 15, 2018
https://www.securityweek.com/severe-dos-flaw-discovered-siemens-simatic-plcs

Siemens discovered that these devices fail to properly validate S7 communication packets, allowing a remote attacker to trigger a DoS condition that causes the system to enter DEFECT mode and remain so until it’s manually restarted.

The security hole, tracked as CVE-2018-4850 with a CVSS score of 7.5, impacts S7-400 CPUs with hardware version 4.0 and earlier, S7-400 CPUs with hardware version 5.0 prior to 5.2, and S7-400H CPUs with hardware version 4.5 and earlier. In order to patch the vulnerability, users have been advised to update to hardware versions 5.0, 5.2 and 6.0, respectively.

Organizations should apply the updates as soon as possible considering that DoS vulnerabilities can pose a serious risk in industrial environments.
Click to expand...

ronjor · May 16, 2018

Siemens Industrial Products (Update F)

Original release date: December 05, 2017 | Last revised: May 16, 2018
5. MITIGATIONS
--------- Begin Update F Part 2 of 2 --------
Siemens has provided firmware updates for the following products to fix the vulnerability:
Click to expand...

ronjor · May 17, 2018

Medtronic N'Vision Clinician Programmer

Original release date: May 17, 2018
Vulnerability: Missing Encryption of Sensitive Data
4. MITIGATIONS
Medtronic has not developed a product update to address the vulnerability, but is reinforcing security reminders within this advisory to help reduce the risk associated with the vulnerability
Click to expand...

ronjor · May 17, 2018

GE PACSystems CPE305/310, CPE330, CPE400, RSTi-EP CPE 100, CPU320/CRU320, RXi

Original release date: May 17, 2018
Vulnerability: Improper Input Validation
4. MITIGATIONS

GE has released the following firmware to mitigate the vulnerability (login required):
Click to expand...

ronjor · May 17, 2018

PHOENIX CONTACT FL SWITCH 3xxx/4xxx/48xx Series

Original release date: May 17, 2018
Vulnerabilities: Command Injection, Information Exposure, Stack-based Buffer Overflow
4. MITIGATIONS

PHOENIX CONTACT recommends that affected users upgrade to firmware Version 1.34 or higher. The updated firmware may be downloaded from the managed switch product page on the PHOENIX CONTACT website:
Click to expand...

ronjor · May 17, 2018

Siemens SIMATIC S7-400 CPU

Original release date: May 17, 2018
Vulnerability: Improper Input Validation
4. MITIGATIONS

Siemens has released updates for several affected products and recommends users update to the new version.
Click to expand...

ronjor · May 17, 2018

Delta Electronics Delta Industrial Automation TPEditor

Original release date: May 17, 2018
Vulnerability: Heap-based Buffer Overflow
4. MITIGATIONS

Until Delta Electronics releases a new version of TPEditor, the company suggests that affected users should restrict the interaction with the application to trusted files.
Click to expand...

ronjor · May 17, 2018

Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)

Original release date: May 19, 2016 | Last revised: May 17, 2018
Vulnerabilities: Information Exposure

2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-16-140-02 Siemens SIPROTEC Information Disclosure Vulnerabilities (Update A) that was published July 5, 2016, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · May 17, 2018

Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update B)

Original release date: March 08, 2018 | Last revised: May 17, 2018
Vulnerabilities: Missing Authentication for Critical Function, Inadequate Encryption Strength

2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-18-067-01 Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update A) that was published April 19, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · May 22, 2018

Martem TELEM-GW6/GWM

Original release date: May 22, 2018
Vulnerabilities: Missing Authentication for Critical Function, Resource Exhaustion, Cross-Site Scripting
4. MITIGATIONS
Martem has provided updated information within the “Security Considerations” section of their Configuration Manual which can be accessed at following link:
Click to expand...

ronjor · May 22, 2018

BD Kiestra and InoquIA Systems

Original release date: May 22, 2018
Vulnerabilities: Product UI does not Warn User of Unsafe Actions
4. MITIGATIONS

BD intends to implement necessary mitigation controls by July 2018. This mitigation will include removing the functionality to trigger SQL functions in DB Manager, PerformA and ReadA. Until mitigations are in place, BD recommends the following compensating controls. These controls require user action in order to reduce risk associated with these vulnerabilities:
Click to expand...

ronjor · May 23, 2018

VPNFilter Destructive Malware

Original release date: May 23, 2018
NCCIC is aware of a sophisticated modular malware system known as VPNFilter. Devices known to be affected by VPNFilter include Linksys, MikroTik, NETGEAR, and TP-Link networking equipment, as well as QNAP network-attached storage (NAS) devices. Devices compromised by VPNFilter may be vulnerable to the collection of network traffic (including website credentials), as well as the monitoring of Modbus supervisory control and data acquisition (SCADA) protocols.
Click to expand...

guest · May 24, 2018

Schneider Electric patches XML External Entity vulnerability
May 24, 2018
https://www.scmagazine.com/schneide...external-entity-vulnerability/article/768373/

Schneider Electric patched a vulnerability (CVE-2018-7783) in its SoMachine Basic that could result in the disclosure or retrieval of data during an out-of-band attack.
The vulnerability was identified as an out-of-band remote arbitrary data retrieval issue that impacts all versions of SoMachine Basic prior to v1.6 SP1.

The patch can be found here. The flaw was discovered by Gjoko Krstikj of Applied Risk.
Click to expand...

ronjor · May 24, 2018

BeaconMedaes TotalAlert Scroll Medical Air Systems

Original release date: May 24, 2018
Vulnerabilities: Improper Access Control, Insufficiently Protected Credentials, Unprotected Storage of Credentials
4. MITIGATIONS
BeaconMedaes has stated that the vulnerabilities do not compromise either patient health information or compliance with the NFPA 99 standard for healthcare facilities. To address these vulnerabilities, BeaconMedaes has created update 4107600010.24 and recommends that users of the TotalAlert Scroll Medical Air Systems update to this version or the latest release. BeaconMedaes recommends that affected users reach out to BeaconMedaes directly at 1-888-4MEDGAS (463-3427) to obtain this update.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

Useful Searches