The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Apr 9, 2020

Rockwell Automation RSLinx Classic

Original release date: April 09, 2020
Vulnerability: Incorrect Permission Assignment for Critical Resource
4. MITIGATIONS
For Versions 3.60 to 4.11, Rockwell Automation recommends users apply patch 1091155. Affected users are encouraged to apply the most recent version of RSLinx Classic.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 14, 2020

Eaton HMiSoft VU3

Original release date: April 14, 2020
Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read
4. MITIGATIONS
Eaton ceased manufacturing the HMiVU on December 31, 2018, and marked the HMiVU software as end of life. As a result, Eaton no longer provides technical support, security fixes, or other fixes for the HMiVU software. To better serve users and provide ongoing replacement solutions, HMiVU was replaced with the XV100 and XV300 lines of operator interface products. It is strongly recommended HMiVU users contact Eaton for technical support and migration assistance to the XV solution.
NOTE: Eaton has discontinued the HMiVU product and has asked users to upgrade.
Click to expand...

ronjor · Apr 14, 2020

Triangle MicroWorks DNP3 Outstation Libraries

Original release date: April 14, 2020
Vulnerability: Stacked-based Buffer Overflow
4. MITIGATIONS
Triangle Microworks recommends users update to Version 3.26.
Please contact Triangle MicroWorks support for additional details.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 14, 2020

Triangle MicroWorks SCADA Data Gateway

Original release date: April 14, 2020
Vulnerabilities: Stacked-based Buffer Overflow, Out-of-Bounds Read, Type Confusion
4. MITIGATIONS
Triangle Microworks recommends users update to Version 4.0.123
Please contact Triangle MicroWorks support for additional details.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Apr 14, 2020

Siemens Climatix

Original release date: April 14, 2020
Vulnerability: Cross-site Scripting, Basic XSS
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Apr 14, 2020

Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA

Original release date: April 14, 2020
Vulnerabilities: Uncontrolled Resource Consumption, Improper Input Validation
4. MITIGATIONS
Siemens recommends applying updates, where available:
Click to expand...

ronjor · Apr 14, 2020

Siemens SIMOTICS, Desigo, APOGEE, and TALON

Original release date: April 14, 2020
Vulnerability: Business Logic Errors
4. MITIGATIONS
Siemens recommends the following mitigations and workarounds for the following products:
Click to expand...

ronjor · Apr 14, 2020

Siemens SCALANCE & SIMATIC

Original release date: April 14, 2020
Vulnerability: Resource Exhaustion
4. MITIGATIONS
Siemens has not yet identified any specific mitigations or workarounds for this vulnerability.
Additional information on industrial security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Click to expand...

ronjor · Apr 14, 2020

Siemens KTK, SIDOOR, SIMATIC, and SINAMICS

Original release date: April 14, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens recommends applying updates if available:
Click to expand...

ronjor · Apr 14, 2020

Siemens TIM 3V-IE and 4R-IE Family Devices

Original release date: April 14, 2020
Vulnerability: Active Debug Code
4. MITIGATIONS
Siemens has released updates for the affected products and recommends users update to the new version.
Click to expand...

ronjor · Apr 14, 2020

Siemens SIMATIC S7 (Update B)

Original release date: April 14, 2020
Vulnerability: Uncontrolled Resource Consumption (Resource Exhaustion)
5. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Apr 14, 2020

Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update B)

Original release date: April 14, 2020
Vulnerability: Incorrect Calculation of Buffer Size
5. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations:
Click to expand...

ronjor · Apr 14, 2020

Siemens TIA Portal (Update A)

Original release date: April 14, 2020
Vulnerability: Path Traversal
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-014-05 Siemens TIA Portal that was published January 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Apr 14, 2020

Siemens PROFINET Devices (Update E)

Original release date: April 14, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-02 Siemens PROFINET Devices (Update D) that was published March 10, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Apr 14, 2020

Siemens Industrial Products (Update F)

Original release date: April 14, 2020
Vulnerabilities: Integer Overflow or Wraparound, Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-253-03 Siemens Industrial Products (Update E) that was published March 10, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Apr 21, 2020

Inductive Automation Ignition

Original release date: April 21, 2020
Vulnerability: Improper Access Control
4. MITIGATIONS
Inductive Automation recommends the following mitigation:
Upgrade Ignition 8 Gateway to v8.0.10
The following workarounds are suggested if users cannot upgrade to v8.0.10 or above:
Click to expand...

ronjor · Apr 23, 2020

Sierra Wireless AirLink ALEOS (Update B)

Original release date: April 23, 2020
Vulnerabilities: OS Command Injection, Use of Hard-coded Credentials, Unrestricted Upload of File with Dangerous Type, Cross-site Scripting, Cross-site Request Forgery, Information Exposure, Missing Encryption of Sensitive Data
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-122-03 Sierra Wireless AirLink ALEOS (Update A) that was published August 20, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Apr 28, 2020

LCDS LAquis SCADA
Original release date: April 28, 2020

Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Improper Input Validation
4. MITIGATIONS
LCDS recommends users update to the latest version of LAquis SCADA
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · May 5, 2020

SAE IT-systems FW-50 Remote Telemetry Unit (RTU)

Original release date: May 05, 2020
Vulnerabilities: Cross-site Scripting, Path Traversal
4. MITIGATIONS
SAE IT-systems has provided two options for a solution.
Click to expand...

ronjor · May 5, 2020

Fazecast jSerialComm

Original release date: May 05, 2020
Vulnerability: Uncontrolled Search Path Element
4. MITIGATIONS
Fazecast, Inc., recommends users update jSerialComm to Version 2.3 or later
Schneider Electric recommends users upgrade EcoStruxure IT Gateway to Version 1.8.1 or later
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · May 7, 2020

Advantech WebAccess Node
Original release date: May 07, 2020

Vulnerabilities: Improper Validation of Array Index, Relative Path Traversal, SQL Injection, Stack-based Buffer Overflow, Heap-based Buffer Overflow, Out-of-bounds Read
4. MITIGATIONS
Advantech has released WebAccessNode Version 8.4.4.P0320844 to address the reported vulnerabilities for users currently using WebAccessNode Version 8.4.4
Advantech has released WebAccessNode Version 9.0.0.P0320900
to address the reported vulnerabilities for users currently using WebAccessNode Version 9.0.0
Click to expand...

ronjor · May 12, 2020

Eaton Intelligent Power Manager

Original release date: May 12, 2020
Vulnerabilities: Improper Input Validation, Incorrect Privilege Assignment
4. MITIGATIONS
Eaton has released Intelligent Power Manager v1.68 to address the reported vulnerabilities.
To prevent the exploitation of the issues and safeguard the software from malicious entities, Eaton recommends blocking Ports 4679 and 4680 at the enterprise network or home network where Intelligent Power Manager software is installed and used.
Click to expand...

ronjor · May 12, 2020

OSIsoft PI System

Original release date: May 12, 2020
Vulnerabilities: Uncontrolled Search Path Element, Improper Verification of Cryptographic Signature, Incorrect Default Permissions, Uncaught Exception, Null Pointer Dereference, Improper Input Validation, Cross-site Scripting, Insertion of Sensitive Information into Log File
4. MITIGATIONS
OSIsoft reports the following workarounds and defensive measures:
Click to expand...

ronjor · May 12, 2020

Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update A)

Original release date: May 12, 2020
Vulnerabilities: Uncontrolled Resource Consumption, Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-105-05 Siemens IE/PB-Link, RUGGEDCOM, SCALANCE, SIMATIC, SINEMA that was published April 14, 2020, to the ICS webpage on us-cert.gov. This update removes the IE/PB-Link product from the scope of this advisory.
Click to expand...

ronjor · May 12, 2020

Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update A)

Original release date: May 12, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-105-08 Siemens KTK, SIDOOR, SIMATIC, and SINAMICS that was published April 14, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches