The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Feb 11, 2020

Siemens Industrial Real-Time (IRT) Devices (Update B)

Original release date: February 11, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisor update titled ICSA-19-283-01 Siemens Industrial Real-Time (IRT) Devices (Update A) that was published January 14, 2020, on the ICS webpage on us-cert.gov. This advisory includes mitigations for an improper input validation vulnerability reported in the Siemens Industrial Real-Time (IRT) devices.
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC Products (Update A)

Original release date: February 11, 2020
Vulnerability: Exposed Dangerous Method or Function
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-344-04 Siemens SIMATIC Products that was posted December 10, 2019, to the ICS webpage on the us-cert.gov website.
Click to expand...

ronjor · Feb 11, 2020

Digi ConnectPort LTS 32 MEI

Original release date: February 11, 2020
Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Cross-site Scripting
4. MITIGATIONS
Digi recommends users upgrade to the mandatory release of ConnectPort LTS Version 1.4.5, released on November 8, 2019.
Digi International recommends the following best practices:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIPROTEC 4 and SIPROTEC Compact

Original release date: February 11, 2020
Vulnerability: Improper Input Validation
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC S7-1500

Original release date: February 11, 2020
Vulnerability: Resource exhaustion
4. MITIGATIONS
Siemens has released updates for several affected products, is working on updates for the remaining affected products, and recommends specific countermeasures until fixes are available:
Click to expand...

ronjor · Feb 11, 2020

Siemens SCALANCE S-600

Original release date: February 11, 2020
Vulnerabilities: Resource Exhaustion, Cross-site Scripting
4. MITIGATIONS
For SCALANCE S602 v3.0, Siemens recommends only accessing links from trusted sources in the browser you use to access the SCALANCE S administration website.
For SCALANCE S612, all versions v3.0 or higher, SCALANCE S623, all versions v3.0 or higher, and SCALANCE S627-2M, all versions v3.0 or higher, Siemens recommends migrating to SCALANCE SC-600 Industrial Security Appliances.
For more information on these vulnerabilities and associated software updates, please see Siemens security advisory SSA-591405
Click to expand...

ronjor · Feb 11, 2020

Siemens OZW Web Server

Original release date: February 11, 2020
Vulnerability: Information disclosure
4. MITIGATIONS
Siemens recommends users to update OZW672 and OZW772 to version 10.0
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIPORT MP

Original release date: February 11, 2020
Vulnerability: Insufficient logging
4. MITIGATIONS
Siemens recommends users to update to Version 3.1.4 (login required).
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Feb 11, 2020

Siemens SCALANCE X Switches

Original release date: February 11, 2020
Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
Siemens has released updates, which are recommended to be applied when possible:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC

Original release date: February 11, 2020
Vulnerability: Incorrect Calculation of Buffer Size
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations:
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC S7

Original release date: February 11, 2020
Vulnerability: Uncontrolled Resource Consumption (Resource Exhaustion)
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Feb 11, 2020

Siemens PROFINET-IO Stack

Original release date: February 11, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens has released updates for several affected products and recommends users update to the new version. Siemens is preparing further updates and recommends specific countermeasures until patches are available.
Click to expand...

ronjor · Feb 11, 2020

Siemens SIMATIC CP 1543-1

Original release date: February 11, 2020
Vulnerabilities: Improper Access Control, Loop with Unreachable Exit Condition
4. MITIGATIONS
The latest update for SIMATIC CP 1543-1 contains fixes for the vulnerabilities within its embedded ProFTPD FPT server. Siemens recommends updating SIMATIC CP 1543-1 modules to Version 2.2
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Feb 11, 2020

Siemens Industrial Products SNMP Vulnerabilities

Original release date: February 11, 2020
Vulnerabilities: Data Processing Errors, NULL Pointer Dereference
4. MITIGATIONS
Siemens has released updates for several affected products and recommends users update to the new version. Siemens is preparing further updates and recommends specific countermeasures until patches are available.
Click to expand...

ronjor · Feb 11, 2020

Synergy Systems & Solutions HUSKY RTU

Original release date: February 11, 2020
Vulnerabilities: Improper Authentication, Improper Input Validation
4. MITIGATIONS
SSS makes the following recommendations to mitigate risk.
Click to expand...

ronjor · Feb 13, 2020

Schneider Electric Modicon Ethernet Serial RTU

Original release date: February 13, 2020
Vulnerabilities: Improper Check for Unusual or Exceptional Conditions, Improper Access Control
4. MITIGATIONS
Schneider Electric recommends users set up network segmentation and implement a firewall to block all unauthorized access to Port 2404/TCP and SNMP Port 161/UDP.
For more information, see the Schneider Electric security notification.
Click to expand...

ronjor · Feb 13, 2020

Schneider Electric Magelis HMI Panels

Original release date: February 13, 2020
Vulnerability: Improper Check for Unusual or Exceptional Conditions
4. MITIGATIONS
Schneider Electric recommends users set up network segmentation and implement a firewall to block all unauthorized access to Ports 44818/TCP, 502/TCP, 6000/TCP, 6002/TCP, 8080/TCP, 8014/TCP, and 6001/TCP.
For more information, see the Schneider Electric security notification.
Click to expand...

ronjor · Feb 18, 2020

ICS Medical Advisory (ICSMA-20-049-01)
Spacelabs Xhibit Telemetry Receiver (XTR)
Original release date: February 18, 2020
Vulnerability: Improper Input Validation
4. MITIGATIONS
Spacelabs has determined the recommended remediation is to update to the newest release v1.2.1 or later. All deployed XTR hardware appliances are capable of update and should be updated.
Many Spacelabs products are appliances and users are not intended to perform updates on them. Products or systems that are obsolete or are not able to be patched may use this alternate mitigation step to help protect against BlueKeep:

ronjor · Feb 18, 2020

ICS Medical Advisory (ICSMA-20-049-02)
GE Ultrasound products
Original release date: February 18, 2020

Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
GE Healthcare recommends organizations restrict physical access to devices by unauthorized individuals. Additionally, where available, GE recommends users enable the “system lock” password in the Administration GUI menu if possible. This will require a password to be entered before the system can be accessed. The ‘system lock’ would limit non-authenticated users from accessing the application.
GE recommends that users with questions reach out to a GE service representative and users with an active support account visit https://securityupdate.gehealthcare.com (login required).
Click to expand...

ronjor · Feb 18, 2020

Honeywell INNCOM INNControl 3

Original release date: February 18, 2020
Vulnerability: Improper Privilege Management
4. MITIGATIONS
Honeywell encourages users to contact an INNCOM sales representative or authorized systems integrator to obtain information on upgrading their system(s) to the latest version. Honeywell also offers online INNCOM support. Additional information about the vulnerability can be found in the Honeywell Security Notification.
Click to expand...

ronjor · Feb 18, 2020

Emerson OpenEnterprise

Original release date: February 18, 2020
Vulnerability: Heap-based Buffer Overflow
4. MITIGATIONS
Emerson recommends all users upgrade to OpenEnterprise 3.3, Service Pack 4 (3.3.4), to resolve this issue. OpenEnterprise Service Packs are available to users with access to the Emerson SupportNet system (login required). Details will be found in the downloads area.
Click to expand...

ronjor · Feb 18, 2020

Interpeak IPnet TCP/IP Stack (Update C)

Original release date: February 18, 2020
Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow, Integer Underflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Race Condition, Argument Injection, Null Pointer Dereference
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-274-01 Interpeak IPnet TCP/IP Stack (Update B) that was published December 10, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Feb 20, 2020

B&R Industrial Automation Automation Studio and Automation Runtime

Original release date: February 20, 2020
Vulnerability: Improper Authorization
4. MITIGATIONS
B&R reports product-technical reasons disallow the changing of SNMP credentials. To reduce risk from this vulnerability, the following Automation Studio versions disable the SNMP service by default in newly created AS projects:
Click to expand...

ronjor · Feb 20, 2020

Rockwell Automation FactoryTalk Diagnostics

Original release date: February 20, 2020
Vulnerability: Deserialization of Untrusted Data
4. MITIGATIONS
Rockwell Automation is currently working to develop updated software that addresses the reported vulnerability. Rockwell Automation recommends affected users implement the following compensating controls, based on their needs:
Click to expand...

ronjor · Feb 20, 2020

Honeywell NOTI-FIRE-NET Web Server (NWS-3)

Original release date: February 20, 2020
Vulnerabilities: Authentication Bypass by Capture-replay, Path Traversal
4. MITIGATIONS
Honeywell has released a firmware update package (login required) for all affected products listed above.
For additional details please see Honeywell Security Notification SN 2020-02-04 01
Honeywell recommends users with affected products take the following steps to protect themselves:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches