The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jan 17, 2019

ControlByWeb X-320M

Original release date: January 17, 2019
Vulnerabilities: Improper Authentication, Cross-site Scripting
4. MITIGATIONS
ControlByWeb has released a firmware update to address the vulnerabilities found on the X-320M that can be downloaded at:
Click to expand...

ronjor · Jan 22, 2019

Johnson Controls Facility Explorer

Original release date: January 22, 2019
Vulnerabilities: Path Traversal, Improper Authentication
4. MITIGATIONS
Johnson Controls has mitigated these vulnerabilities in the following versions. Users should upgrade to one of these product versions (FX14.6 recommended):

Facility Explorer 14.6 (released September 2018 )

Facility Explorer 14.4u1 (released August 2018 )

Facility Explorer 6.6 (released August 2018 )

Click to expand...

ronjor · Jan 22, 2019

Dräger Infinity Delta

Original release date: January 22, 2019
Vulnerabilities: Improper Input Validation, Information Exposure Through Log Files, Improper Privilege Management
4. MITIGATIONS
Dräger released fixes for these vulnerabilitiesin December 2018. Users can find Delta/Infinity Explorer VF10.1 software releases for affected components via Dräger ServiceConnect.
Click to expand...

guest · Jan 23, 2019

Flaws in Moxa IIoT Product Expose ICS to Remote Attacks
January 23, 2019
https://www.securityweek.com/flaws-moxa-iiot-product-expose-ics-remote-attacks

Over a period of two weeks, researchers from Kaspersky Lab’s Industrial Control Systems Cyber Emergency Response Team (ICS CERT) conducted a black box analysis of Moxa’s ThingsPro 2.

Since Moxa ThingsPro is designed to provide access to industrial systems from the Internet, Kaspersky warns that attackers may be able to exploit the vulnerabilities remotely over the Web. A search conducted with Shodan revealed 43 results for “thingspro,” while a search on the Fofa.so platform returned over 150 results for the same string.

The vulnerabilities were reported to Moxa in January 2018 and they were patched in late July. The vendor released an advisory for the flaws in October 2018 and Kaspersky has now made technical details available.
Click to expand...

ronjor · Jan 24, 2019

PHOENIX CONTACT FL SWITCH

Original release date: January 24, 2019
Vulnerabilities: Cross-site Request Forgery, Improper Restriction of Excessive Authentication Attempts, Cleartext Transmission of Sensitive Information, Resource Exhaustion, Incorrectly Specified Destination in a Communication Channel, Insecure Storage of Sensitive Information, and Memory Corruption
4. MITIGATIONS
Phoenix Contact recommends that users of FL SWITCH devices with affected firmware versions update the firmware to Version 1.35 or higher, which fixes these vulnerabilities. The updated firmware may be downloaded from the managed switch product page on the Phoenix Contact website. Please see the CERT VDE advisory for these vulnerabilities for the location of the new firmware download for each specific product:
Click to expand...

ronjor · Jan 24, 2019

Advantech WebAccess/SCADA

Original release date: January 24, 2019
Vulnerabilities: Improper Authentication, Authentication Bypass, SQL Injection
4. MITIGATIONS
Advantech has released Version 8.3.5 of WebAccess/SCADA to address the reported vulnerabilities. Users can download the latest version of WebAccess/SCADA at the following location (registration required):
Click to expand...

ronjor · Jan 29, 2019

AVEVA Wonderware System Platform

Original release date: January 29, 2019
Vulnerability: Insufficiently Protected Credentials
4. MITIGATIONS
AVEVA recommends users using Wonderware System Platform 2017 Update 2 and prior should upgrade to System Platform 2017 Update 3 as soon as possible. This update can be downloaded from the following location (login required):
Click to expand...

ronjor · Jan 29, 2019

Mitsubishi Electric MELSEC-Q Series PLCs

Original release date: January 29, 2019
Vulnerability: Resource Exhaustion
4. MITIGATIONS
Mitsubishi Electric has produced a new version of the firmware. Additional information about this vulnerability or Mitsubishi electric’s compensating control is available by contacting a local Mitsubishi Electric representative, which can be found at the following location:
Click to expand...

ronjor · Jan 29, 2019

Yokogawa License Manager Service

Original release date: January 29, 2019
Vulnerability: Unrestricted Upload of Files with Dangerous Type
4. MITIGATIONS
Yokogawa recommends users of affected devices and versions update to the latest available release. Details about the products, affected revisions, and suggested mitigations are available in the Yokogawa Security Advisory Report “YSAR-198-0001: Vulnerability of access control in License Manager Service of Yokogawa products.” This advisory can be found at the following location:
Click to expand...

ronjor · Jan 29, 2019

BD FACSLyric

Original release date: January 29, 2019
Vulnerabilitiy: Improper Access Control
4. MITIGATIONS
BD will follow-up directly with all affected users to perform remediation activities. BD will disable the administrative account for users with BD FACSLyric RUO Cell Analyzer units having the Windows 10 Pro Operating System. BD has contacted and will replace the computer workstations for affected users with the BD FACSLyric IVD Cell Analyzer units with the Windows 10 Pro Operating System.
Click to expand...

ronjor · Jan 29, 2019

Stryker Medical Beds

Original release date: January 29, 2019
Vulnerability: Reusing a Nonce
4. MITIGATIONS
Stryker has released software updates for affected products to mitigate the KRACK vulnerabilities.
Click to expand...

ronjor · Jan 31, 2019

Schneider Electric EVLink Parking

Original release date: January 31, 2019
Vulnerabilities: Use of Hard-coded Credentials, Code Injection, SQL Injection
4. MITIGATIONS
Schneider Electric recommends users setup a firewall to restrict remote access to the charging stations by unauthorized users. A software update is also available for download to mitigate these vulnerabilities:
Click to expand...

ronjor · Jan 31, 2019

IDenticard PremiSys

Original release date: January 31, 2019
Vulnerabilities: Use of Hard-coded Credentials, Use of Hard-coded Password, Inadequate Encryption Strength
4. MITIGATIONS
IDenticard has released updated software, Version 4.1, to address the hard-coded credential vulnerability (CVE-2019-3906 ). Inadequate encryption strength (CVE-2019-3907) and use of hard-coded password (CVE-2019-3908 ) are in process of being fixed with an update expected February 2019. These software updates will be provided free of charge. Additional information can be obtained by contacting the IDenticard Technical Support Team at (800) 220-8096
Click to expand...

ronjor · Jan 31, 2019

Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update A)

Original release date: June 14, 2018 | Last revised: January 31, 2019
Vulnerability: Permissions, Privileges, and Access Controls
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-165-01 Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C that was published June 14, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · Jan 31, 2019

Omron CX-Supervisor (Update A)

Original release date: October 17, 2018 | Last revised: January 31, 2019
Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-Of-Bounds Read, Use-After-Free, Incorrect Type Conversion or Cast
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-18-290-01 Omron CX-Supervisor that was published October 17, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · Feb 5, 2019

AVEVA InduSoft Web Studio and InTouch Edge HMI

Original release date: February 05, 2019
Vulnerabilities: Missing Authentication for Critical Function, Resource Injection
4. MITIGATIONS
AVEVA recommends affected users upgrade to the latest version of affected products. The following security updates address the vulnerabilities outlined in this advisory. Software updates can be downloaded from the Global Customer Support “Software Download” area or from the links below:
Click to expand...

ronjor · Feb 5, 2019

Rockwell Automation EtherNet/IP Web Server Modules

Original release date: February 05, 2019
Vulnerability: Improper Input Validation
4. MITIGATIONS
Rockwell Automation recommends that affected users disable the SNMP service if not in use.
For more information please refer to the Rockwell Automation security advisory at (login required):
Click to expand...

ronjor · Feb 5, 2019

Siemens SIMATIC S7-1500 CPU

Original release date: February 05, 2019
Vulnerabilities: Improper Input Validation
4. MITIGATIONS
Siemens recommends users upgrade to Version 2.5 or newer. Users who cannot upgrade because of hardware restrictions are recommended to apply the manual mitigations. Updates are available for download from the following link:
Click to expand...

ronjor · Feb 5, 2019

WECON LeviStudioU

Original release date: February 05, 2019
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Memory Corruption
4. MITIGATIONS
WECON has produced an updated version to fix the reported problems. Please contact WECON customer service for more information about how to obtain the updated version.
Click to expand...

ronjor · Feb 5, 2019

Kunbus PR100088 Modbus Gateway

Original release date: February 05, 2019
Vulnerabilities: Improper Authentication, Missing Authentication for Critical Function, Improper Input Validation
4. MITIGATIONS
Kunbus recommends the following:
Update to Version R02; the updated file can be downloaded from the link below (installation instructions can be found in the readme file included in the download):
Click to expand...

ronjor · Feb 5, 2019

BD FACSLyric (Update A)

Original release date: January 29, 2019 | Last revised: February 05, 2019
Vulnerability: Improper Access Control
5. MITIGATIONS
BD will follow-up directly with all affected users to perform remediation activities. BD will disable the administrative account for users with BD FACSLyric RUO Cell Analyzer units having the Windows 10 Pro Operating System. BD has contacted and will replace the computer workstations for affected users with the BD FACSLyric IVD Cell Analyzer units with the Windows 10 Pro Operating System.
For additional information regarding the reported vulnerability please contact BD for the following support:
Click to expand...

ronjor · Feb 5, 2019

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update O)

Original release date: May 09, 2017 | Last revised: February 05, 2019
Vulnerabilities: Improper Input Validation
5. MITIGATIONS
The attacker must have network access to the local Ethernet segment (Layer 2).
Siemens strongly recommends verifying the affected products are protected as described in PROFINET Security Guidelines and Siemens Operational Guidelines in order to run the devices in a protected IT environment.
Click to expand...

ronjor · Feb 5, 2019

Siemens Industrial Products (Update K)

Original release date: December 05, 2017 | Last revised: February 05, 2019
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01 Siemens Industrial Products (Update J) published December 11, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · Feb 5, 2019

Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update B)

Original release date: March 20, 2018 | Last revised: February 05, 2019
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-18-079-02 Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update A) that was published October 9, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

ronjor · Feb 5, 2019

Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update F)

Original release date: March 29, 2018 | Last revised: February 05, 2019
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-18-088-03 Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update D) that was published November 13, 2018, on the NCCIC/ICS-CERT website.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

guest Guest

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches