The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Sep 12, 2019

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager

Original release date: September 12, 2019
Vulnerability: Cross-site Scripting
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released Version 3.5.15.0 to resolve this vulnerability for all affected CODESYS products.
Click to expand...

ronjor · Sep 12, 2019

3S-Smart Software Solutions GmbH CODESYS Control V3 Online User Management

Original release date: September 12, 2019
Vulnerability: Incorrect Permission Assignment for Critical Resource
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released Version 3.5.13.0 to resolve this vulnerability for all affected CODESYS products.
Click to expand...

ronjor · Sep 12, 2019

3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server

Original release date: September 12, 2019
Vulnerability: NULL Pointer Reference
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released Version 3.5.15.0 to resolve this vulnerability for all affected CODESYS products.
Click to expand...

ronjor · Sep 12, 2019

3S-Smart Software Solutions GmbH CODESYS V3 Products Containing a CODESYS

Communication Server
Original release date: September 12, 2019
Vulnerability: Improper Input Validation
4. MITIGATIONS
3S-Smart Software Solutions GmbH has released Version 3.5.15.0 to resolve this vulnerability for all affected CODESYS products.
Click to expand...

ronjor · Sep 17, 2019

Advantech WebAccess

Original release date: September 17, 2019
Vulnerabilities: Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization
4. MITIGATIONS
Advantech has released Version 8.4.2 of WebAccessNode to address the reported vulnerabilities. Users can download the latest version of WebAccessNode at the following location:
Click to expand...

ronjor · Sep 17, 2019

Siemens SINEMA Remote Connect Server

Original release date: September 17, 2019
Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Information Exposure, Cross-Site Request Forgery, Use of Password Hash with Insufficient Computational Effort
4. MITIGATIONS
Siemens recommends users upgrade to Versions 2.0 SP1 or later for the affected products.
Click to expand...

ronjor · Sep 17, 2019

Honeywell Performance IP Cameras and Performance NVRs

Original release date: September 17, 2019
Vulnerability: Information Exposure
4. MITIGATIONS
Honeywell has released firmware update packages for all affected products. The updates can be obtained with a customer account at the following location (login required):
Click to expand...

ronjor · Sep 19, 2019

Tridium Niagara

Original release date: October 10, 2019 | Last revised: September 19, 2019
Vulnerabilities: Information Exposure, Improper Authorization
4. MITIGATIONS
Tridium has released updates that mitigate these vulnerabilities and recommends users update to the versions identified below:
Click to expand...

ronjor · Sep 19, 2019

Advantech WebAccess

Original release date: September 17, 2019 | Last revised: September 18, 2019
Vulnerabilities: Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization
4. MITIGATIONS
Advantech has released Version 8.4.2 of WebAccessNode to address the reported vulnerabilities. Users can download the latest version of WebAccessNode at the following location:
Click to expand...

ronjor · Sep 19, 2019

WECON LeviStudioU (Update A)

Original release date: September 19, 2019
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Memory Corruption
5. MITIGATIONS

--------- Begin Update A Part 2 of 2 ---------

WECON has produced Version 1.8.69 to fix the reported vulnerabilities in Version 1.8.56; however, exploits are still successful against this updated version. Future software updates will be made available at the following location:
https://www.us-cert.gov/ics/advisories/ICSA-19-036-03

Tridium Niagara
Original release date: October 10, 2019 | Last revised: September 19, 2019
Vulnerabilities: Information Exposure, Improper Authorization
4. MITIGATIONS
Tridium has released updates that mitigate these vulnerabilities and recommends users update to the versions identified below:
Click to expand...

ronjor · Sep 19, 2019

Rockwell Automation Arena Simulation Software (Update B)

Original release date: August 01, 2019 | Last revised: September 19, 2019
Vulnerabilities: Use After Free, Information Exposure, Type Confusion, Insufficient UI Warning of Dangerous Operations, Access of Uninitialized Pointer
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-213-05 Rockwell Automation Arena Simulation Software (Update A) that was published September 5, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 1, 2019

Moxa EDR 810 Series

Original release date: October 01, 2019
Vulnerabilities: Improper Input Validation, Improper Access Control
4. MITIGATIONS
Moxa recommends users upgrade to the latest firmware, v5.2 or later.
Click to expand...

ronjor · Oct 1, 2019

Yokogawa Products

Original release date: October 01, 2019
Vulnerability: Unquoted Search Path or Element
4. MITIGATIONS
Yokogawa has provided the following countermeasures for this vulnerability in each of the affected products:
Click to expand...

ronjor · Oct 1, 2019

Interpeak IPnet TCP/IP Stack

Original release date: October 01, 2019
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Race Condition, Argument Injection, Null Pointer Dereference
4. MITIGATIONS
ENEA recommends affected users upgrade to a newer version of OSE or contact WindRiver (now the license holder for Interpeak) for compensating controls.
Click to expand...

ronjor · Oct 1, 2019

ICS Medical Advisory (ICSMA-19-274-01)

Interpeak IPnet TCP/IP Stack
Original release date: October 01, 2019
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Race Condition, Argument Injection, Null Pointer Dereference
4. MITIGATIONS
ENEA recommends affected users upgrade to a newer version of OSE or contact WindRiver (now the license holder for Interpeak) for compensating controls.
Click to expand...

ronjor · Oct 3, 2019

ICS Medical Advisory (ICSMA-19-274-01)

Interpeak IPnet TCP/IP Stack (Update A)
Original release date: October 01, 2019 | Last revised: October 03, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSMA-19-274-01 Interpeak IPnet TCP/IP Stack that was published October 1, 2019, on the ICS webpage on us-cert.gov
Click to expand...

ronjor · Oct 8, 2019

Siemens Industrial Products (Update A)

Original release date: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-253-03 Siemens Industrial Products that was published September 10, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

ICS Medical Advisory (ICSMA-19-248-01)

BD Pyxis (Update A)
Original release date: September 05, 2019 | Last revised: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-248-01 BD Pyxis that was published September 5, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update D)

Original release date: April 09, 2019 | Last revised: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-06 Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update C) that was published July 9, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D)

Original release date: March 20, 2018 | Last revised: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-18-079-02 Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update C) that was published May 14, 2019, on the on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

Siemens Industrial Products (Update N)

Original release date: December 05, 2017 | Last revised: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01 Siemens Industrial Products (Update M) published March 12, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update P)

Original release date: May 09, 2017 | Last revised: October 08, 2019
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-129-02 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update O) that was published February 5, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Oct 8, 2019

SMA Solar Technology AG Sunny WebBox

Original release date: October 08, 2019
Vulnerability: Cross-Site Request Forgery
4. MITIGATIONS
This product is end-of-life and is no longer supported.
SMA recommends deactivation of port forwarding as it is not required for monitoring PV systems via the SMA Sunny Portal. If direct access to a system from the Internet is necessary, SMA recommends using an encrypted virtual private network (VPN). On delivery, any saved default passwords should also be replaced with individual secure passwords, and unused ports on the system/router should be closed.
Click to expand...

ronjor · Oct 8, 2019

GE Mark VIe Controller

Original release date: October 08, 2019
Vulnerabilities: Improper Authorization, Use of Hard-coded Credentials
4. MITIGATIONS
GE recommends users apply the following mitigations:
Click to expand...

ronjor · Oct 8, 2019

Siemens SIMATIC WinAC RTX (F) 2010

Original release date: October 08, 2019
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches