The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Feb 20, 2020

Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)

Original release date: February 20, 2020
Vulnerabilities: Cleartext Transmission of Sensitive Information, Origin Validation Error, Use of Hard-coded Credentials, Weak Password Recovery Mechanism for Forgotten Password, Weak Password Requirements
4. MITIGATIONS
Auto-Maskin reports new firmware is available to download from its website that mitigates the reported vulnerabilities.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Feb 25, 2020

Moxa MB3xxx Series Protocol Gateways

Original release date: February 25, 2020
Vulnerabilities: Stack-based Buffer Overflow, Integer Overflow to Buffer Overflow, Cross-site Request Forgery, Use of a Broken or Risky Cryptographic Algorithm, Information Exposure, Cleartext Transmission of Sensitive Information, Weak Password Requirements, Cleartext Storage of Sensitive Information, Incorrectly Specified Destination in a Communication Channel
4. MITIGATIONS
Moxa has developed the following solutions to address the vulnerabilities:
Click to expand...

ronjor · Feb 25, 2020

Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility

Original release date: February 25, 2020
Vulnerabilities: Cleartext Storage of Sensitive Information, Cleartext Transmission of Sensitive Information, Incorrectly Specified Destination in a Communication Channel
4. MITIGATIONS
Moxa has developed a solution to address these vulnerabilities: Please contact Moxa Technical Support for a security patch.
Please see Moxa’s security advisory for more information.
Click to expand...

ronjor · Feb 25, 2020

Moxa PT-7528 and PT-7828 Series Ethernet Switches

Original release date: February 25, 2020
Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of Hard-coded Credentials, Weak Password Requirements, Information Exposure
4. MITIGATIONS
Moxa has developed a solution to address these vulnerabilities: Please contact Moxa Technical Support for a security patch.
Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.
Please see Moxa’s security advisory for more information.
Click to expand...

ronjor · Feb 25, 2020

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

Original release date: February 25, 2020
Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of Hard-coded Credentials, Classic Buffer Overflow, Cleartext Transmission of Sensitive Information, Weak Password Requirements
4. MITIGATIONS
Moxa has developed the following solutions to address the vulnerabilities:
Click to expand...

ronjor · Feb 25, 2020

Honeywell WIN-PAK

Original release date: February 25, 2020
Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of HTTP Headers for Scripting Syntax, Use of Obsolete Function
4. MITIGATIONS
Honeywell recommends users with potentially affected products take the following steps to protect themselves:
Click to expand...

ronjor · Mar 3, 2020

Emerson ValveLink

Original release date: March 03, 2020
Vulnerability: Improper Access Control
4. MITIGATIONS
Emerson recommends users upgrade the affected products listed below:
Click to expand...

ronjor · Mar 3, 2020

PHOENIX CONTACT Emalytics Controller ILC

Original release date: March 03, 2020
Vulnerability: Incorrect Permission Assignment for Critical Resource
4. MITIGATIONS
Phoenix Contact strongly recommends affected users update to engineering software Emalytics v1.2.3 or higher and recommission the controllers. The updated version is available on the vendor's product page.
Click to expand...

ronjor · Mar 3, 2020

Omron PLC CJ Series

Original release date: March 03, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Omron recommends the following mitigation measures:
Click to expand...

ronjor · Mar 3, 2020

Moxa AWK-3131A Series Industrial AP/Bridge/Client

Original release date: March 03, 2020
Vulnerabilities: Improper Access Control, Use of Hard-coded Cryptographic Key, OS Command Injection, Use of Hard-coded Credentials, Classic Buffer Overflow, Out-of-bounds Read, Stack-based Buffer Overflow, Improper Access Control, Authentication Bypass Using an Alternate Path or Channel
4. MITIGATIONS
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
Click to expand...

ronjor · Mar 5, 2020

WAGO I/O-CHECK

Original release date: March 05, 2020
Vulnerabilities: Information Exposure Through Sent Data, Buffer Access with Incorrect Length Value, Missing Authentication for Critical Function, Classic Buffer Overflow
4. MITIGATIONS
WAGO recommends updating to the latest firmware, FW 15 or above.
WAGO has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Mar 10, 2020

Siemens SiNVR 3

Original release date: March 10, 2020
Vulnerabilities: Path Traversal, Cleartext Storage in a File or on Disk, SQL Injection, Cross-site Scripting, Insufficient Logging Improper Input Validation, Weak Cryptography for Passwords
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Mar 10, 2020

SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet

Original release date: March 10, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens recommends the following mitigations for affected users:
Click to expand...

ronjor · Mar 10, 2020

Siemens Spectrum Power 5

Original release date: March 10, 2020
Vulnerability: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
4. MITIGATIONS
Siemens recommends the following mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Mar 10, 2020

Johnson Controls Kantech EntraPass

Original release date: March 10, 2020
Vulnerability: Improper Input Validation
3. MITIGATIONS
Johnson Controls recommends the following:
Click to expand...

ronjor · Mar 10, 2020

Johnson Controls Metasys

Original release date: March 10, 2020
Vulnerability: Improper Restriction of XML External Entity Reference
4. MITIGATIONS
Users should contact a branch office for remediation. For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2020-3 v1
Click to expand...

ronjor · Mar 10, 2020

Rockwell Automation MicroLogix Controllers and RSLogix 500 Software

Original release date: March 10, 2020
Vulnerabilities: Use of Hard-coded Cryptographic Key, Use of a Broken or Risky Algorithm for Password Protection, Use of Client-Side Authentication, Cleartext Storage of Sensitive Information
4. MITIGATIONS
For MicroLogix 1400 series B controllers, Rockwell recommends affected users apply FRN 21.002 or later
For MicroLogix 1400 Series B devices and use the enhanced password security feature.
Rockwell Automation reports that there are currently no mitigations for MicroLogix 1400 series A controllers or MicroLogix 1100 controllers.
Click to expand...

ronjor · Mar 10, 2020

Siemens PROFINET-IO Stack (Update A)

Original release date: March 10, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-04 Siemens PROFINET-IO Stack that was published February 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC S7 (Update A)

Original release date: March 10, 2020
Vulnerability: Uncontrolled Resource Consumption (Resource Exhaustion)
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-05 Siemens SIMATIC S7 that was published February 11, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update A)

Original release date: March 10, 2020
Vulnerability: Incorrect Calculation of Buffer Size
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-042-06 ICSA-20-042-06 Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC that was published February 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC S7-1500 (Update A)

Original release date: March 10, 2020
Vulnerability: Resource Exhaustion
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-11 Siemens SIMATIC S7-1500 that was published February 11, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Mar 10, 2020

Siemens SPPA-T3000 (Update A)

Original release date: March 10, 2020
Vulnerabilities: Improper Input Validation, Deserialization of Untrusted Data, Improper Authentication, Cleartext Transmission of Sensitive Information, Unrestricted Upload of File with Dangerous Type, Heap-based Buffer Overflow, Integer Overflow or Wraparound, Out-of-bounds Read, Improper Access Control, Stack-based Buffer Overflow, SFP Secondary Cluster: Missing Authentication, Information Exposure
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-351-02 Siemens SPPA-T3000 that was published December 17, 2019, to the ICS webpage on us-cert.gov.
5. MITIGATIONS

--------- Begin Update A Part 2 of 2 ---------

Siemens recommends users upgrade SPPA-T3000 Application Server to SPPAT3000 Service Pack R8.2 SP2 to resolve vulnerabilities in the Application Server. Please contact a Siemens service management organization to obtain the update. For the Migration Server, Siemens recommends following the configuration recommendations for SPPAT3000 MS3000 in Siemens customer portal to mitigate these vulnerabilities.
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC Products (Update B)

Original release date: March 10, 2020
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-344-04 Siemens SIMATIC Products (Update A) that was posted February 11, 2020, to the ICS webpage on the us-cert.gov website.
5. MITIGATIONS
Siemens has released updates for the following affected products and recommends users update to the new version:
Click to expand...

ronjor · Mar 10, 2020

Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update A)

Original release date: March 10, 2020
Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Missing Support for Integrity Check
5. MITIGATIONS
Siemens has released updates for the following products and recommends users update to the new version.
Click to expand...

ronjor · Mar 10, 2020

Siemens Industrial Real-Time (IRT) Devices (Update C)

Original release date: March 10, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-01 Siemens Industrial Real-Time (IRT) Devices (Update B) that was published February 11, 2020, on the ICS webpage on us-cert.gov. This advisory includes mitigations for an improper input validation vulnerability in Siemens Industrial Real-Time (IRT) devices.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches