The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jul 9, 2020

Rockwell Automation FactoryTalk Linx Software (Update A)

Original release date: June 11, 2020 | Last revised: July 09, 2020
Vulnerabilities: Improper Input Validation, Path Traversal, Unrestricted Upload of File with Dangerous Type
4. MITIGATIONS
Rockwell Automation recommends users apply these patches by following instructions in knowledgebase articles below:
Click to expand...

ronjor · Jul 14, 2020

Capsule Technologies SmartLinx Neuron 2

Original release date: July 14, 2020
Vulnerability: Protection Mechanism Failure
4. MITIGATIONS
Capsule Technologies recommends the following mitigations:
Click to expand...

ronjor · Jul 14, 2020

Advantech iView

Original release date: July 14, 2020
Vulnerabilities: SQL Injection, Path Traversal, Command Injection, Improper Input Validation, Missing Authentication for Critical Function, Improper Access Control
4. MITIGATIONS
Advantech has released version 5.7 of iView to address the reported vulnerabilities. Users can download the latest version of iView
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Jul 14, 2020

Moxa EDR-G902 and EDR-G903 Series Routers

Original release date: July 14, 2020
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
Moxa recommends users implement the following to mitigate the vulnerability:
Install firmware patch. Patches may be downloaded from Moxa’s security advisory page
Please see Moxa’s security advisory for more information.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Jul 14, 2020

Siemens SICAM MMU, SICAM T, and SICAM SGU

Original release date: July 14, 2020
Vulnerabilities: Out-of-bounds Read, Missing Authentication for Critical Function, Missing Encryption of Sensitive Data, Use of Password Hash with Insufficient Computational Effort, Cross-site Scripting, Classic Buffer Overflow, Basic XSS, Authentication Bypass by Capture-replay
4. MITIGATIONS
Siemens recommends applying updates, where available:
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC HMI Panels

Original release date: July 14, 2020
Vulnerability: Cleartext Transmission of Sensitive Information
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Jul 14, 2020

Siemens UMC Stack

Original release date: July 14, 2020
Vulnerabilities: Unquoted Search Path or Element, Uncontrolled Resource Consumption, Improper Input Validation
4. MITIGATIONS
Siemens recommends users upgrade affected products if upgrade are available for those products:
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC S7-200 SMART CPU Family

Original release date: July 14, 2020
Vulnerability: Uncontrolled Resource Consumption
4. MITIGATIONS
Siemens recommends users update to v2.5.1 and limit network access to device to trusted sources.
Click to expand...

ronjor · Jul 14, 2020

Siemens Opcenter Execution Core

Original release date: July 14, 2020
Vulnerabilities: Cross-site Scripting, SQL Injection, Improper Access Control
4. MITIGATIONS
Siemens recommends users upgrade to Opcenter Execution Core v8.2
(login required).
Click to expand...

ronjor · Jul 14, 2020

Siemens LOGO! Web Server

Original release date: July 14, 2020
Vulnerability: Classic Buffer Overflow
4. MITIGATIONS
Siemens recommends affected users update to the following versions:
Click to expand...

ronjor · Jul 14, 2020

ICS Medical Advisory (ICSMA-20-170-02)
Baxter PrismaFlex and PrisMax (Update B)

Original release date: July 14, 2020
Vulnerabilities: Cleartext Transmission of Sensitive Information, Improper Authentication, Use of Hard-Coded Password
5. MITIGATIONS
--------- Begin Update B Part 1 of 1 ---------
Click to expand...

ronjor · Jul 14, 2020

Treck TCP/IP Stack (Update D)

Original release date: July 14, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-168-01 Treck TCP/IP Stack (Update C) that was published July 7, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update A)

Original release date: July 14, 2020
Vulnerability: Unquoted Search Path or Element
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-161-04 Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK that was published June 9, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC, SINAMICS (Update A)

Original release date: July 14, 2020
Vulnerabilities: Uncontrolled Search Path Element, Heap-based Buffer Overflow
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-161-05 Siemens SIMATIC, SINAMICS that was published June 9, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet (Update A)

Original release date: July 14, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-070-02 Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller over Profinet that was published March 10, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens Industrial Products SNMP Vulnerabilities (Update A)

Original release date: July 14, 2020
Vulnerabilities: Data Processing Errors, NULL Pointer Dereference
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-02 Siemens Industrial Products SNMP Vulnerabilities that was published February 11, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC (Update D)

Original release date: July 14, 2020
Vulnerability: Incorrect Calculation of Buffer Size
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled 20-042-06 Siemens SIMATIC PCS 7, SIMATIC WinCC, and SIMATIC NET PC that (Update C) was published May 12, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens S7-1200 and S7-200 SMART CPUs (Update B)

Original release date: July 14, 2020
Vulnerability: Exposed Dangerous Method or Function
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled-19-318-02 Siemens S7-1200 (Update A) that was published December 10, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens PROFINET Devices (Update F)

Original release date: July 14, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-02 Siemens PROFINET Devices (Update E) that was published April 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens SCALANCE Products (Update A)

Original release date: July 14, 2020
Vulnerabilities: Improper Adherence to Coding Standards
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-19-227-03 Siemens SCALANCE Products that was published August 15, 2019, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens Industrial Products (Update O)

Original release date: July 14, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01 Siemens Industrial Products (Update N) published October 8, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 14, 2020

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update Q)

Original release date: July 14, 2020
Vulnerabilities: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-129-02 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update P) that was published October 8, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 21, 2020

Treck TCP/IP Stack (Update E)

Original release date: July 21, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-168-01 Treck TCP/IP Stack (Update D) that was published July 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 23, 2020

Schneider Electric Triconex TriStation and Tricon Communication Module

Original release date: July 23, 2020
Vulnerabilities: Cleartext Transmission of Sensitive Information, Uncontrolled Resource Consumption, Hidden Functionality, Improper Access Control
4. MITIGATIONS
Schneider Electric released TriStation v4.9.1 and v4.10.1 on May 30, 2013 and 4.13.0 on January 26, 2015 to address these issues. Tricon v10.5.0 was released on August 13, 2009 and v10.5.4 on February 2, 2012 to address the issues.
Schneider Electric notified customers of updated product availability via direct-to-customer notification and fixed versions of these offers are available for download here
Schneider Electric strongly recommends following industry cybersecurity best practices
Click to expand...

ronjor · Jul 28, 2020

Secomea GateManager

Original release date: July 28, 2020
Vulnerabilities: Improper Neutralization of Null Byte or NUL Character, Off-by-one Error, Use of Hard-coded Credentials, Use of Password Hash with Insufficient Computational Effort
4. MITIGATIONS
Secomea has released a new version to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Secomea website.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches