The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Aug 20, 2019

Sierra Wireless AirLink ALEOS (Update A)

Original release date: May 02, 2019 | Last revised: August 20, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-122-03 Sierra Wireless AirLink ALEOS that was published May 2, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 20, 2019

Siemens SCALANCE X Switches (Update A)

Original release date: August 13, 2019 | Last revised: August 20, 2019
2. UPDATE
This updated advisory is a follow-up to the original advisory titled ICSA-19-225-03 Siemens SCALANCE X Switches that was published August 13, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 27, 2019

Datalogic AV7000 Linear Barcode Scanner

Original release date: August 27, 2019
Vulnerability: Authentication Bypass Using an Alternate Path or Channel
4. MITIGATIONS
Datalogic reports a new version of the firmware was released to mitigate the reported vulnerability. Affected users may obtain the latest version by contacting a Datalogic service representative or by calling Datalogic at +1 800 227 2633.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 27, 2019

Delta Controls enteliBUS Controllers

Original release date: August 27, 2019
Vulnerability: Buffer Overflow
4. MITIGATIONS
Delta Controls recommends users upgrade from enteliBUS 3.40 firmware to Version 3.40 R6 build 612850. Delta Controls also states it is important buildings are updated to the 3.40 R6 release to mitigate risk. The firmware is only accessible by Delta Controls registered partners and is not available for public download. To acquire the firmware update, contact a Delta Controls distributor or Delta Controls directly.
In addition to upgrading enteliBUS, Delta Controls recommends the following actions to secure building sites:
Click to expand...

ronjor · Aug 29, 2019

ICS Medical Advisory (ICSMA-19-241-02)
Philips HDI 4000 Ultrasound

Original release date: August 29, 2019
Vulnerability: Use of Obsolete Function
4. MITIGATIONS
Users should implement controls to limit access to the network and consider replacing the system with a newer technology and supported operating system.
Please see the Philips product security website for the latest security information for Philips products:
Click to expand...

ronjor · Aug 29, 2019

ICS Medical Advisory (ICSMA-19-241-01)
Change Healthcare McKesson and Horizon Cardiology

Original release date: August 29, 2019
Vulnerability: Incorrect Default Permissions
4. MITIGATIONS
Change Healthcare recommends users of the affected versions contact Change Healthcare Support as soon as possible to arrange installation of the supplied patch; To contact Change Healthcare Support please call:
Click to expand...

ronjor · Sep 3, 2019

EZAutomation EZ Touch Editor

Original release date: September 03, 2019
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
EZAutomation recommends users update to Version 2.2.0 or later.
Click to expand...

ronjor · Sep 3, 2019

EZAutomation EZ PLC Editor

Original release date: September 03, 2019
Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer
4. MITIGATIONS
EZAutomation recommends users update to Version 1.9.0 or later.
Click to expand...

ronjor · Sep 5, 2019

Rockwell Automation Allen-Bradley PowerMonitor 1000 (Update A)

Original release date: February 19, 2019 | Last revised: September 05, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-050-04 Rockwell Automation Allen-Bradley PowerMonitor 1000 that was published February 9, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 5, 2019

Rockwell Automation Arena Simulation Software (Update A)

Original release date: August 01, 2019 | Last revised: September 05, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-213-05 Rockwell Automation Arena Simulation Software that was published August 1, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 5, 2019

Red Lion Controls Crimson

Original release date: September 05, 2019
Vulnerabilities: Use After Free, Improper Restriction of Operations within the Bounds of a Memory Buffer, Pointer Issues, Use of Hard-coded Cryptographic Key
4. MITIGATIONS
Red Lion Controls recommends users migrate to Crimson 3.1 release 3112.00 or later where the model choice allows. Updated software can be found at the following link:
Click to expand...

ronjor · Sep 5, 2019

ICS Medical Advisory (ICSMA-19-248-01)
BD Pyxis
Original release date: September 05, 2019

Vulnerability: Session Fixation
4. MITIGATIONS
BD notes that connecting medication dispensing cabinets to a hospital domain is an uncommon configuration and is not recommended by BD. BD also notes this vulnerability has been remediated in the latest release of Version 1.6.1.1, and recommends the following mitigations and compensating controls in order to reduce risk associated with this vulnerability:
Remove expired users from the relevant AD role that grants access to the Pyxis ES system.
Pyxis ES systems are not recommended to be placed on the hospital domain.
As a best practice, users should not rely on expiration dates to remove users from their hospitals’ AD system.
Click to expand...

ronjor · Sep 10, 2019

Delta Electronics TPEditor

Original release date: September 10, 2019
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Out-of-bounds Write
4. MITIGATIONS
Delta Electronics recommends affected users update to the latest version of Delta Industrial Automation TPEditor, Version 1.95, which is available for download at:
Click to expand...

ronjor · Sep 10, 2019

Siemens SINETPLAN

Original release date: September 10, 2019
Vulnerability: Improper Authorization
4. MITIGATIONS
Siemens recommends users update TIA Administrator to Version 1.0 SP1 Upd1. Updates can be found at the following link:
Click to expand...

ronjor · Sep 10, 2019

Siemens Industrial Products

Original release date: September 10, 2019
Vulnerabilities: Integer Overflow or Wraparound, Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens recommends users follow the specific workarounds and mitigations below. Siemens has also released fixes for the following products:
Click to expand...

ronjor · Sep 10, 2019

Siemens IE-WSN-PA Link WirelessHART Gateway

Original release date: September 10, 2019
Vulnerability: Cross-site Scripting
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations that users can apply to reduce the risk:
Click to expand...

ronjor · Sep 10, 2019

Siemens SIMATIC TDC CP51M1

Original release date: September 10, 2019
Vulnerability: Improper Input Validation
4. MITIGATIONS
Siemens recommends users update to Version 1.1.7 or later. Updates can be obtained at the following link:
Click to expand...

ronjor · Sep 10, 2019

OSIsoft PI SQL Client

Original release date: September 10, 2019
Vulnerability: Integer Overflow or Wraparound
4. MITIGATIONS
OSIsoft recommends users upgrade to PI SQL Client 2018 R2 or later to resolve this issue. To download PI SQL Client 2018 R2, please access the OSIsoft customer portal (login required).
Click to expand...

ronjor · Sep 10, 2019

Siemens SIMATIC WinCC and PCS7 (Update B)

Original release date: September 10, 2019
Vulnerability: Unrestricted Upload of File with Dangerous Type
5. MITIGATIONS
Siemens currently has updates for the following products:
Click to expand...

ronjor · Sep 10, 2019

Siemens SIMATIC PCS7, WinCC, TIA Portal (Update C)

Original release date: September 10, 2019
Vulnerabilities: SQL Injection, Uncaught Exception, Exposed Dangerous Method
5. MITIGATIONS
Siemens has an update available for the following affected products:
Click to expand...

ronjor · Sep 10, 2019

Siemens SIMATIC WinCC and PCS7 (Update B)

Original release date: September 10, 2019
Vulnerability: Unrestricted Upload of File with Dangerous Type
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-192-02 Siemens SIMATIC WinCC and PCS7 (Update A) that was published August 13, 2019, on the ICS webpage of us-cert.gov.
Click to expand...

ronjor · Sep 10, 2019

Siemens SIMATIC PCS7, WinCC, TIA Portal (Update C)

Original release date: September 10, 2019
Vulnerabilities: SQL Injection, Uncaught Exception, Exposed Dangerous Method
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-134-08 Siemens SIMATIC PCS7, WinCC, TIA Portal (Update B) that was published August 13, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 10, 2019

Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU (Update A)
Original release date: September 10, 2019

EXECUTIVE SUMMARY
--------- Begin Update A ---------
CISA is aware of a public report of vulnerabilities with proof-of-concept (PoC) exploit code affecting Mitsubishi Electric Europe B.V. smartRTU (Versions 2.02 and prior) and INEA ME-RTU (Versions 3.0 and prior), remote terminal unit products. According to this report, there are multiple vulnerabilities that could be exploited to gain remote code execution with root privileges. CISA has notified Mitsubishi Electric Europe B.V. of the report and has asked them to confirm the vulnerabilities and identify mitigations. CISA is issuing this alert to provide early notice of the report and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
2 MITIGATIONS
CISA is currently coordinating with the vendor and security researcher to identify mitigations.
Researcher has recommended the following workaround mitigations until an official fix is available:
Click to expand...

ronjor · Sep 12, 2019

Philips IntelliVue WLAN

Original release date: September 12, 2019
Vulnerabilities: Use of Hard-coded Password, Download of Code Without Integrity Check
4. MITIGATIONS
WLAN Version B is obsolete. Philips recommends users update to the WLAN assembly Version C wireless module in affected IntelliVue monitors.
WLAN Version C with current firmware of B.00.31 is not vulnerable to the described attack.
WLAN Version A is a software patch from Philips estimated to be available in Incenter by the end of 2019.
Wireless network access should be controlled by authentication and authorization (e.g., WPA2), which are supported by Philips.
As an additional mitigation measure, Philips recommends implementing a firewall rule on the user’s wireless network to restrict access control via FTP. Users should implement role-based access controls to control physical access to the system. Refer to the Security for Clinical Networks Guide and the IntelliVue Network Configuration Guide for additional security recommendations.
Click to expand...

ronjor · Sep 12, 2019

3S-Smart Software Solutions GmbH CODESYS V3 Web Server

Original release date: September 12, 2019
Vulnerabilities: Path Traversal, Stack-based Buffer Overflow
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released Versions 3.5.12.80, 3.5.14.10, and 3.5.15.0 to resolve the vulnerabilities for the affected CODESYS products.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches