The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jan 14, 2020

Siemens SCALANCE X Switches (Update A)

Original release date: January 14, 2020
Vulnerabilities: Cross-site Scripting
5. MITIGATIONS
Siemens has provided updates for the following products to fix the vulnerabilities:
Click to expand...

ronjor · Jan 14, 2020

Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update E)

Original release date: January 14, 2020
Vulnerability: Out-of-bounds Read
5. MITIGATIONS
Siemens recommends upgrading to the following firmware updates for the products below:
Click to expand...

ronjor · Jan 14, 2020

Siemens EN100 Ethernet Module (Update A)

Original release date: January 14, 2020
Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Cross-site Scripting, Relative Path Traversal
5. MITIGATIONS
Siemens has released updates for several affected products, is working on updates for the remaining affected products, and recommends specific countermeasures until fixes are available.
Click to expand...

ronjor · Jan 14, 2020

Siemens Industrial Real-Time (IRT) Devices (Update A)

Original release date: January 14, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-283-01 Siemens Industrial Real-Time (IRT) Devices that was published October 10, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jan 14, 2020

Siemens PROFINET Devices (Update B)

Original release date: January 14, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-283-02 Siemens PROFINET Devices that was published October 10, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jan 14, 2020

Siemens SIMATIC WinAC RTX (F) 2010 (Update A)

Original release date: January 14, 2020
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-281-03 Siemens SIMATIC WinAC RTX (F) 2010 that was published October 8, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jan 14, 2020

Siemens SCALANCE X (Update A)

Original release date: January 14, 2020
Vulnerability: Storing Passwords in a Recoverable Format
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-162-04 Siemens SCALANCE X that was published June 11, 2019, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jan 14, 2020

Siemens Industrial Products with OPC UA (Update D)

Original release date: January 14, 2020
Vulnerability: Uncaught Exception
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-03 Siemens Industrial Products with OPC UA (Update C) that was posted July 9, 2019, on the former ICS-CERT website. This updated advisory includes mitigations for an uncaught exception vulnerability in Siemens' Industrial Products using OPS UA communications protocol.
Click to expand...

ronjor · Jan 14, 2020

Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update E)

Original release date: January 14, 2020
Vulnerability: Out-of-bounds Read
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-06 Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update D) that was published October 8, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jan 14, 2020

GE PACSystems RX3i

Original release date: January 14, 2020
Vulnerability: Improper Input Validation
4. MITIGATIONS
Emerson has acquired the affected products from GE. All inquiries should be directed to Emerson:
Click to expand...

ronjor · Jan 14, 2020

Siemens SINEMA Server

Original release date: January 14, 2020
Vulnerability: Incorrect Privilege Assignment
4. MITIGATIONS
Siemens recommends that affected users update to Version 14.0 SP2 Update 1
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Jan 14, 2020

Siemens SCALANCE X Switches

Original release date: January 14, 2020
Vulnerability: Missing Authentication for Critical Function
4. MITIGATIONS
Siemens recommends the following workarounds and mitigations affected users can apply to reduce risk:
Click to expand...

ronjor · Jan 14, 2020

Siemens SINAMICS PERFECT HARMONY GH180

Original release date: January 14, 2020
Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
Siemens recommends that affected users contact customer support to obtain configuration changes. Detailed instructions are available through customer support. Siemens notes that no other specific mitigations or workarounds have been identified.
Click to expand...

ronjor · Jan 14, 2020

Siemens TIA Portal

Original release date: January 14, 2020
Vulnerability: Path Traversal
4. MITIGATIONS
Siemens recommends installing the following software update to address this vulnerability:
Click to expand...

ronjor · Jan 14, 2020

OSIsoft PI Vision

Original release date: January 14, 2020
Vulnerabilities: Improper Access Control, Cross-site Request Forgery (CSRF), Cross-site Scripting, Inclusion of Sensitive Information in Log Files
4. MITIGATIONS
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
Additionally, OSIsoft recommends the following defensive measures:
Click to expand...

ronjor · Jan 14, 2020

Siemens EN100 Ethernet Module (Update A)

Original release date: January 14, 2020
Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Cross-site Scripting, Relative Path Traversal
5. MITIGATIONS
Siemens has released updates for several affected products, is working on updates for the remaining affected products, and recommends specific countermeasures until fixes are available.
Click to expand...

ronjor · Jan 16, 2020

Schneider Electric Modicon Controllers

Original release date: January 16, 2020
Vulnerability: Improper Check for Unusual or Exceptional Conditions
4. MITIGATIONS
Schneider Electric has developed the following mitigations:
Specific Modicon M580 firmware v3.10 is available at:
Click to expand...

ronjor · Jan 21, 2020

Honeywell Maxpro VMS & NVR

Original release date: January 21, 2020
Vulnerabilities: Deserialization of Untrusted Data, SQL Injection
4. MITIGATIONS
Honeywell recommends users update VMS 560 Build 595 T2-Patch for affected VMS systems, and NVR 5.6 Build 595 T2-Patch for affected NVR systems. The updates can be found at the Honeywell’s MyWebTech site via a user account.
Additionally, Honeywell recommends that users:
Click to expand...

ronjor · Jan 23, 2020

ICS Advisory (ICSMA-20-023-01)
GE CARESCAPE, ApexPro, and Clinical Information Center systems
Original release date: January 23, 2020

Vulnerabilities: Unprotected Storage of Credentials, Improper Input Validation, Use of Hard-coded Credentials, Missing Authentication for Critical Function, Unrestricted Upload of File with Dangerous Type, Inadequate Encryption Strength
4. MITIGATIONS
GE recommends users confirm the proper configuration of the MC and IX networks to ensure that the isolation and configuration meet the requirements listed in the Patient Monitoring Network Configuration Guide, CARESCAPE Network Configuration Guide, and product technical and service manuals. These can be obtained by contacting GE via the customer support portal with a valid support account. A properly isolated network requires an attacker to gain physical access in order to carry out an exploit.
GE recommends that, in addition to applying network management best practices, users ensure:
Click to expand...

ronjor · Jan 30, 2020

ICS Advisory (ICSMA-18-058-01)
Medtronic 2090 Carelink Programmer Vulnerabilities (Update C)

Original release date: January 30, 2020
Vulnerabilities: Storing Passwords in a Recoverable Format, Relative Path Traversal, Improper Restriction of Communication Channel to Intended Endpoints
5. MITIGATIONS
Medtronic has assessed the vulnerabilities and determined that no new potential safety risks were identified. In order to enhance system security, Medtronic has added periodic integrity checks for files associated with the software deployment network. Additionally, Medtronic has developed server-side security changes that further enhance security. Medtronic reports that they will not be issuing a product update; however, Medtronic has identified compensating controls within this advisory to reduce the risk of exploitation and reiterates the following from the CareLink 2090 Programmer Reference Manual:
Click to expand...

ronjor · Jan 30, 2020

ICS Medical Advisory (ICSMA-19-080-01)
Medtronic Conexus Radio Frequency Telemetry Protocol (Update A)

Original release date: January 30, 2020
Vulnerabilities: Improper Access Control, Cleartext Transmission of Sensitive Information
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSMA-19-080-01 Medtronic Conexus Radio Frequency Telemetry Protocol that was published March 21, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Feb 4, 2020

ICS Advisory (ICSA-20-035-01)
AutomationDirect C-More Touch Panels
Original release date: February 04, 2020

Vulnerability: Insufficiently Protected Credentials
4. MITIGATIONS
Automation Direct recommends users to upgrade to Version 6.53
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update F)

Original release date: February 11, 2020
Vulnerability: Out-of-bounds Read
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-06 Siemens CP, SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update E) that was published January 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Feb 11, 2020

Siemens Industrial Products with OPC UA (Update E)

Original release date: February 11, 2020
Vulnerability: Uncaught Exception
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-03 Siemens Industrial Products with OPC UA (Update D) that was posted January 14, 2020, to the ICS webpage on the us-cert.gov website. This updated advisory includes mitigations for an uncaught exception vulnerability in Siemens' Industrial Products using OPS UA communications protocol.
Click to expand...

ronjor · Feb 11, 2020

Siemens PROFINET Devices (Update C)

Original release date: February 11, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-02 Siemens PROFINET Devices (Update B) that was published January 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches