The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jun 9, 2020

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK

Original release date: June 09, 2020
Vulnerability: Unquoted Search Path or Element
4. MITIGATIONS
Siemens recommends applying updates, where available
Click to expand...

ronjor · Jun 9, 2020

Siemens SIMATIC, SINAMICS

Original release date: June 09, 2020
Vulnerabilities: Uncontrolled Search Path Element, Heap-based Buffer Overflow
4. MITIGATIONS
Siemens recommends applying updates, where available:
Click to expand...

ronjor · Jun 9, 2020

Siemens SINUMERIK

Original release date: June 09, 2020
Vulnerabilities: Buffer Underflow, Heap-based Buffer Overflow, Improper Initialization, Out-of-bounds Read, Stack-based Buffer Overflow, Access of Memory Location After End of Buffer, Off-by-one Error, Improper Null Termination, Improper Initialization
4. MITIGATIONS
Siemens has released updates for the affected products and recommends users update to the latest versions:
Click to expand...

ronjor · Jun 9, 2020

OSIsoft PI System (Update A)

Original release date: June 09, 2020
Vulnerabilities: Uncontrolled Search Path Element, Improper Verification of Cryptographic Signature, Incorrect Default Permissions, Uncaught Exception, Null Pointer Dereference, Improper Input Validation, Cross-site Scripting, Insertion of Sensitive Information into Log File
5. MITIGATIONS
--------- Begin Update A Part 2 of 2 ---------
OSIsoft provides the following security updates to mitigate the reported vulnerabilities:
Click to expand...

ronjor · Jun 9, 2020

Siemens Industrial Products (Update F)

Original release date: April 14, 2020
Vulnerabilities: Integer Overflow or Wraparound, Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-253-03 Siemens Industrial Products (Update E) that was published March 10, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jun 9, 2020

Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update H)

Original release date: June 09, 2020
Vulnerability: Out-of-bounds Read
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-06 Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update G) that was published March 10, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jun 9, 2020

ICS Advisory (ICSMA-18-228-01)
Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs (Update A)

Original release date: June 09, 2020
Vulnerabilities: Improper Input Validation, Use of Hard Coded Credentials
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSMA-18-228-01 Philips PageWriter TC10, TC20, TC30, TC50, and TC70 Cardiographs that was published August 16, 2018, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jun 11, 2020

ICS Medical Advisory (ICSMA-20-163-01)
Philips IntelliBridge Enterprise IBE

Original release date: June 11, 2020
Vulnerability: Insertion of Sensitive Information into Log File
4. MITIGATIONS
Philips plans a new release (IBE B.13) by the end of Q4 2020 that remediates the security risk by not logging the plain text user credentials in the log file.
As an interim mitigation to this vulnerability, Philips recommends the following:
Click to expand...

ronjor · Jun 11, 2020

OSIsoft PI Web API 2019

Original release date: June 11, 2020
Vulnerability: Cross-site Scripting
4. MITIGATIONS
OSIsoft recommends affected users upgrade to PI Web API 2019 SP1.
OSIsoft also recommends affected users implement the following measures to reduce exploitation:
Click to expand...

ronjor · Jun 11, 2020

Rockwell Automation FactoryTalk Linx Software

Original release date: June 11, 2020
Vulnerabilities: Improper Input Validation, Path Traversal, Unrestricted Upload of File with Dangerous Type
4. MITIGATIONS
Rockwell Automation recommends users apply these patches by following instructions in knowledgebase articles below:
Click to expand...

ronjor · Jun 16, 2020

Mitsubishi Electric MELSEC iQ-R series (Update A)
Original release date: June 16, 2020
Vulnerability: Resource Exhaustion
5. MITIGATIONS

--------- Begin Update A Part 1 of 1 ---------

Mitsubishi Electric has fixed the following versions to discard packets when specially crafted packets are received:
Click to expand...

https://www.us-cert.gov/ics/advisories/icsa-20-161-02

ronjor · Jun 16, 2020

Treck TCP/IP Stack

Original release date: June 16, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
CISA is aware of a public report, known as “Ripple20” that details vulnerabilities found in the Treck TCP/IP stack. CISA is issuing this advisory to provide early notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
4. MITIGATIONS
Treck recommends users apply the latest version of the affected products (Treck TCP/IP 6.0.1.66 or later versions).
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-01)
Baxter ExactaMix

Original release date: June 18, 2020
Vulnerabilities: Use of Hard-coded Password, Cleartext Transmission of Sensitive Data, Missing Encryption of Sensitive Data, Improper Access Control, Exposure of Resource to Wrong Sphere, Improper Input Validation
4. MITIGATIONS
Baxter recommends that users of the ExactaMix EM 2400 Versions 1.10 and 1.11, and ExactaMix EM1200 Versions 1.1 and 1.2, should contact the service support team or regional product service support to upgrade to the ExactaMix Version 1.4 (EM1200) and ExactaMix Version 1.13 (EM2400) compounders.
For all users, Baxter recommends the following compensating controls including, but not limited to:
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-02)
Baxter PrismaFlex and PrisMax

Original release date: June 18, 2020
Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Authentication, Use of Hard-Coded Password
4. MITIGATIONS
For PrismaFlex, Baxter recommends users update to Version SW 8.2x or later. The hard-coded service password vulnerability has been remediated in PrismaFlex Versions SW 8.2
For PrisMax, Baxter recommends users upgrade to PrisMaxv3 with DCM (Digital Communication Module), which supports mutually authenticated TLS tunnel to a PDMS or EMR system capable of implementing the latest TLS 1.2.
Additionally, Baxter recommends users of affected devices implement the following best practices:
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-03)
Baxter Phoenix Hemodialysis Delivery System

Original release date: June 18, 2020
Vulnerability: Cleartext Transmission of Sensitive Information
4. MITIGATIONS
Baxter recommends users apply the following implementation guidance:
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-04)
Baxter Sigma Spectrum Infusion Pumps

Original release date: June 18, 2020
Vulnerabilities: Use of Hard-coded Password, Cleartext Transmission of Sensitive Data, Incorrect Permission Assignment for Critical Resource, Operation on a Resource After Expiration or Release
4. MITIGATIONS
Baxter recommends ensuring appropriate physical controls within user environments to protect against unauthorized access to devices.
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-05)
BIOTRONIK CardioMessenger II

Original release date: June 18, 2020
Vulnerabilities: Improper Authentication, Cleartext Transmission of Sensitive Information, Missing Encryption of Sensitive Data, Storing Passwords in a Recoverable Format
4. MITIGATIONS
BIOTRONIK reports they will not be issuing a product security update; however, BIOTRONIK has identified compensating controls which have been put place that reduce the risk of exploitation and prevent patient safety risks. BIOTRONIK assessed these vulnerabilities and determined no new potential safety risks exist.
BIOTRONIK recommends users take the following defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:
Click to expand...

ronjor · Jun 18, 2020

ICS Medical Advisory (ICSMA-20-170-06)
BD Alaris PCU

Original release date: June 18, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
BD recommends the following to help reduce the risks associated with this third-party vulnerability:
Click to expand...

ronjor · Jun 18, 2020

Treck TCP/IP Stack (Update A)

Original release date: June 18, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-168-01 Treck TCP/IP Stack that was published June 16, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jun 18, 2020

Johnson Controls exacqVision

Original release date: June 18, 2020
Vulnerability: Improper Verification of Cryptographic Signature
4. MITIGATIONS
Johnson Controls recommends the following mitigations:
Upgrade exacqVision Web Service to v20.06.2.0 or higher
Upgrade exacqVision Enterprise Manager to v20.06.3.0 or higher
For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2020-7 v1
Click to expand...

ronjor · Jun 18, 2020

Mitsubishi Electric MC Works64, MC Works32

Original release date: June 18, 2020
Vulnerabilities: Out-of-bounds Write, Deserialization of Untrusted Data, Code Injection
4. MITIGATIONS
Mitsubishi Electric recommends updating to the latest software version or applying security patches.
Click to expand...

ronjor · Jun 18, 2020

ICONICS GENESIS64, GENESIS32

Original release date: June 18, 2020
Vulnerabilities: Out-of-Bounds Write, Deserialization of Untrusted Data, Code Injection
4. MITIGATIONS
ICONICS is releasing a patch for v10.96, v10.95.5, and v10.95.2 of GENESIS64.
ICONICS is releasing a patch for v9.4 and v9.5 of GENESIS32.
ICONICS recommends users update to the latest software versions
More information on these vulnerabilities and associated mitigations can be found in ICONICS Whitepapers on Security Vulnerabilities
Click to expand...

ronjor · Jun 18, 2020

Rockwell Automation FactoryTalk Services Platform

Original release date: June 18, 2020
Vulnerability: Improper Input Validation
4. MITIGATIONS
Affected users are encouraged to use Rockwell Automation Knowledgebase article 25612 to determine if FactoryTalk Services Platform is installed. Those using the affected product are directed to implement a secure communication strategy as outlined in Rockwell Automation Knowledgebase article 109056.
For more information please see Rockwell Automation Knowledgebase article 1126946
Click to expand...

ronjor · Jun 18, 2020

Rockwell Automation FactoryTalk View SE

Original release date: June 18, 2020
Vulnerabilities: Improper Input Validation, Improper Restriction of Operations Within The Bounds of a Memory Buffer, Permissions, Privileges, and Access Controls, Exposure of Sensitive Information to an Unauthorized Actor
4. MITIGATIONS
Rockwell Automation has released new versions of the affected products to mitigate the reported vulnerabilities. Affected users who are not able to apply the latest update are encouraged to seek additional mitigations or workarounds from the vendor’s published guidelines in their security advisory
Click to expand...

ronjor · Jun 23, 2020

ICS Medical Advisory (ICSMA-20-170-06)
BD Alaris PCU (Update A)
Original release date: June 23, 2020

Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-170-06 BD Alaris PCU that was published June 18, 2020, on the ICS webpage on us-cert.gov.
https://www.us-cert.gov/ics/advisories/icsma-20-170-06
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches