The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jul 23, 2019

NREL EnergyPlus

Original release date: July 23, 2019
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
It is recommended that users update the application to the latest available release, v9.0.1 or later, available at the following location:
Click to expand...

ronjor · Jul 23, 2019

ICS Medical Advisory (ICSMA-19-190-01)
GE Aestiva and Aespire Anesthesia (Update A)

Original release date: July 09, 2019 | Last revised: July 23, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSMA-19-190-01 GE Aestiva and Aespire Anesthesia published July 9, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 30, 2019

Wind River VxWorks
Original release date: July 30, 2019

Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Race Condition, Argument Condition or Modification, Null Pointer Dereference, Argument Injection or Modification
4. MITIGATIONS
Wind River has produced controls and patches to mitigate the reported vulnerabilities. To obtain patches, email PSIRT@windriver.com and indicate the VxWorks major version for which you need source patches.
For more detailed information on the vulnerabilities and the mitigating controls, please see the Wind River advisory at: https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Click to expand...

ronjor · Jul 30, 2019

Prima Systems FlexAir

Original release date: July 30, 2019
Vulnerabilities: OS Command Injection, Unrestricted Upload of File with Dangerous Type, Cross-site Request Forgery, Small Space of Random Values, Cross-site Scripting, Exposure of Backup file to Unauthorized Control Sphere, Improper Authentication, Use of Hard-coded Credentials
4. MITIGATIONS
Prima Systems has released Version 2.5.12 to fix these issues.
To update to the latest firmware, each user should select the “Check for Upgrade” option in the “Centrals” menu in the GUI. The user’s controller will connect to the Prima Systems server and update to the latest version.
Click to expand...

ronjor · Aug 1, 2019

3S-Smart Software Solutions GmbH CODESYS V3

Original release date: August 01, 2019
Vulnerabilities: Unverified Ownership, Uncontrolled Memory Allocation
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released v3.5.14.20 and v3.5.15.0. Each of these releases solve the noted vulnerabilities issues.
Please visit the CODESYS update area for more information on how to obtain the software update:
Click to expand...

ronjor · Aug 1, 2019

3S-Smart Software Solutions GmbH CODESYS V3

Original release date: August 01, 2019
Vulnerability: Insufficiently Protected Credentials
4. MITIGATIONS
3S-Smart Software Solutions GmbH reports this vulnerability will be corrected by Version 3.5.16.0, which is expected to be released February 2020.
As long as no update is available, 3S-Smart Software Solutions GmbH strongly recommends activating and using encryption of online communication whenever possible. The encrypted communication protects the password transmission by a TLS based encryption, independent of the weak password encryption affected here.
Click to expand...

ronjor · Aug 1, 2019

LCDS LAquis SCADA LQS File Parsing

Original release date: August 01, 2019
Vulnerabilities: Out-of-bounds Read, Type Confusion
4. MITIGATIONS
LCDS recommends users update to Version 4.3.1.323, which can be found at the following location:
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Aug 1, 2019

Rockwell Automation Arena Simulation Software

Original release date: August 01, 2019
Vulnerabilities: Use After Free, Information Exposure
4. MITIGATIONS
Rockwell Automation has released Version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.
Rockwell Automation also recommends users:
Do not open untrusted .doe files with Arena Simulation Software.
Ensure all software is run as a User and not as an Administrator to minimize the impact of malicious code on the infected system.
Use trusted software, software patches, anti-virus/anti-malware programs, and interact only with trusted websites and attachments
For more information please see the Rockwell Automation security advisory at (login required):
Click to expand...

ronjor · Aug 1, 2019

Fuji Electric FRENIC Loader

Original release date: August 01, 2019
Vulnerability: Out-of-Bounds Read
4. MITIGATIONS
Fuji Electric has released a new version of FRENIC Loader that addresses the reported vulnerability.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 1, 2019

Advantech WebAccess HMI Designer

Original release date: August 01, 2019
Vulnerability: Out-of-bounds Write
4. MITIGATIONS
Advantech has released Version 2.1.9.31 of WebAccess HMI Designer to address the reported vulnerability. Users can download the latest version of WebAccess HMI Designer.
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Aug 8, 2019

Wind River VxWorks (Update A)

Original release date: July 30, 2019 | Last revised: August 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-211-01 Wind River VxWorks that was published July 30, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 13, 2019

Delta Industrial Automation DOPSoft

Original release date: August 13, 2019
Vulnerabilities: Out-of-bounds read, Use after free
4. MITIGATIONS
Delta Electronics recommends users apply the following mitigations:
Update to the latest version of DOPSoft, Version 4.00.06.47
Restrict interaction with the application to trusted files.
Click to expand...

ronjor · Aug 13, 2019

OSIsoft PI Web API

Original release date: August 13, 2019
Vulnerabilities: Inclusion of Sensitive Information in Log Files, Protection Mechanism Failure
4. MITIGATIONS
OSIsoft recommends users upgrade to PI Web API 2018 SP1 or later to resolve these issues. To download PI Web API 2018 SP1, please access the OSIsoft customer portal (login required).
Click to expand...

ronjor · Aug 13, 2019

Siemens SCALANCE X Switches

Original release date: August 13, 2019
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Disable telnet service on affected devices. Users should use SSH instead.
Restrict network access to Port 23/TCP of the device.
Click to expand...

ronjor · Aug 13, 2019

Siemens SIMATIC PCS7, WinCC, TIA Portal (Update B)

Original release date: May 14, 2019 | Last revised: August 13, 2019
Vulnerabilities: SQL Injection, Uncaught Exception, Exposed Dangerous Method
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update A) that was published July 9, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 13, 2019

Siemens SIPROTEC 5 and DIGSI 5 (Update A)

Original release date: July 09, 2019 | Last revised: August 13, 2019
Vulnerabilities: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-190-05 Siemens SIPROTEC 5 and DIGSI 5 that was published July 09, 2019 on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 13, 2019

Siemens Spectrum Power (Update A)

Original release date: July 09, 2019 | Last revised: August 13, 2019
Vulnerability: Cross-site Scripting
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-190-04 Siemens Spectrum Power that was published July 9, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 13, 2019

Siemens SIMATIC WinCC and PCS7 (Update A)

Original release date: July 11, 2019 | Last revised: August 13, 2019
Vulnerability: Unrestricted Upload of File with Dangerous Type
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory titled ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 that was published July 11, 2019, on the ICS webpage of us-cert.gov.
Click to expand...

ronjor · Aug 13, 2019

Siemens SCALANCE X Switches

Original release date: August 13, 2019
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:

Disable telnet service on affected devices. Users should use SSH instead.
Restrict network access to Port 23/TCP of the device.
Click to expand...

ronjor · Aug 13, 2019

Mitsubishi Electric smartRTU and INEA ME-RTU

Original release date: August 13, 2019
1.EXECUTIVE SUMMARY
CISA is aware of a public report of vulnerabilities with proof-of-concept (PoC) exploit code affecting Mitsubishi Electric smartRTU (Versions 2.02 and prior) and INEA ME-RTU (Versions 3.0 and prior), remote terminal unit products. According to this report, there are multiple vulnerabilities that could be exploited to gain remote code execution with root privileges. CISA has notified Mitsubishi Electric of the report and has asked them to confirm the vulnerabilities and identify mitigations. CISA is issuing this ALERT to provide early notice of the report and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Aug 15, 2019

Johnson Controls Metasys

Original release date: August 15, 2019
Vulnerabilities: Reusing a Nonce, Key Pair in Encryption; Use of Hard-coded Cryptographic Key
4. MITIGATIONS
Johnson Controls recommends the following:
Users should upgrade to Version 9.0 or later and configure sites with trusted certificates.
Further ICS security notices and product security guidance are located at the Johnson Controls product security website.
Click to expand...

ronjor · Aug 15, 2019

Fuji Electric Alpha5 Smart Loader

Original release date: August 15, 2019
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
Fuji Electric has released Version 4.2 of the Alpha Loader software (login required).
Click to expand...

ronjor · Aug 15, 2019

Siemens SCALANCE Products

Original release date: August 15, 2019
Vulnerabilities: Improper Adherence to Coding Standards
4. MITIGATIONS
Siemens currently has an update for the following product:
SCALANCE SC-600: Update to v2.0.1
For the balance of the listed products, Siemens is preparing further updates and recommends users apply the following specific workarounds and mitigations to reduce risk until patches are available:
Click to expand...

ronjor · Aug 15, 2019

Siemens SINAMICS

Original release date: August 15, 2019
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens recommends users update to v4.8 SP2 HF9. The update can be obtained from a Siemens representative or via Siemens customer service.
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Aug 20, 2019

Zebra Industrial Printers

Original release date: August 20, 2019
Vulnerability: Insufficiently Protected Credentials
4. MITIGATIONS
Zebra has released a new version of the software that can be obtained at: https://www.zebra.com/linkos
Zebra recommends its printers should not be configured to be fully accessible via the Internet. Zebra further recommends that if a Zebra printer needs to be accessed from outside an organization’s secure network architecture, users use Weblink Technology (or similar tools) that provide a secure, encrypted connection to the user’s printer.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches