The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jul 28, 2020

Softing Industrial Automation OPC

Original release date: July 28, 2020
Vulnerabilities: Heap-based Buffer Overflow, Uncontrolled Resource Consumption
4. MITIGATIONS
Softing Industrial Automation has released an update to mitigate the reported vulnerabilities. The most up-to-date release at the time of this CISA advisory can be found on the Softing Industrial Automation website
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Jul 28, 2020

HMS Industrial Networks eCatcher

Original release date: July 28, 2020
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
HMS recommends users update eCatcher to Version 6.5.5 or later
For more information, see the HMS advisory
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Jul 28, 2020

Delta Industrial Automation DOPSoft (Update A)

Original release date: July 28, 2020
Vulnerabilities: Out-of-bounds Read, Heap-based Buffer Overflow
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-182-01 Delta Industrial Automation DOPSoft that was published June 30, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Jul 30, 2020

Mitsubishi Electric Factory Automation Engineering Products

Original release date: July 30, 2020
Vulnerability: Unquoted Search Path or Element
4. MITIGATIONS
Mitsubishi Electric recommends the following mitigations:
Download the latest version
of each software product and update it. The fixed software products and versions are as follows:
Click to expand...

ronjor · Jul 30, 2020

Mitsubishi Electric Factory Automation Products Path Traversal

Original release date: July 30, 2020
Vulnerability: Path Traversal
4. MITIGATIONS
Mitsubishi Electric recommends the following mitigations:
Download the latest version
of each software product and update. The fixed software products and versions are as follows:
Click to expand...

ronjor · Jul 30, 2020

Inductive Automation Ignition 8

Original release date: July 30, 2020
Vulnerability: Missing Authorization
4. MITIGATIONS
Inductive Automation recommends users upgrade the Ignition software to v8.0.13
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Jul 30, 2020

ICS Medical Advisory (ICSMA-20-212-01)
Philips DreamMapper
Original release date: July 30, 2020

Vulnerability: Insertion of Sensitive Information into Log File
4. MITIGATIONS
Philips plans a new release for the DreamMapper app by June 30, 2021, that remediates this vulnerability.
Users with questions regarding their specific Philips DreamMapper installations should contact a Philips service support team or regional service support.
The Philips advisory is available at the following URL: http://www.philips.com/productsecurity
Please see the Philips product security website for the latest security information for Philips products:
Click to expand...

ronjor · Jul 30, 2020

Mitsubishi Electric Multiple Factory Automation Engineering Software Products

Original release date: July 30, 2020
Vulnerability: Permission Issues
4. MITIGATIONS
Mitsubishi Electric recommends the following mitigations:
Download the latest version
of each software product and update it. Excluding the following products:
Click to expand...

ronjor · Aug 4, 2020

Treck TCP/IP Stack (Update F)

Original release date: August 04, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-168-01 Treck TCP/IP Stack (Update E) that was published July 21, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 4, 2020

Delta Industrial Automation CNCSoft ScreenEditor

Original release date: August 04, 2020
Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read, Access of Uninitialized Pointer
4. MITIGATIONS
Delta Electronics recommends the following:
Update to the latest version of CNCSoft ScreenEditor Version 1.01.26
Restrict the interaction of the application to trusted files.
Click to expand...

ronjor · Aug 4, 2020

Robot Motion Servers

Original release date: August 04, 2020
CISA is aware of a public report of a vulnerability affecting robot motion servers. The motion servers are programs written in OEM exclusive programming languages and run on the robot controller. Motion servers enable receiving target values and optionally sending actual values. According to the public report, which was coordinated with CISA prior to its release, researchers Federico Maggi and Marco Balduzzi of Trend Micro, Marcello Pogliani and Stefano Zanero of POLIMI, and Davide Quarta of POLIMI, EURECOM, identified this vulnerability in the motion servers that allows an adjacent attacker to execute arbitrary code.
Click to expand...

This vulnerability in motion servers is not limited to any one vendor but exist in many OEM robots, both open- and closed-source. CISA is issuing this alert to provide early notice of the report and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Aug 6, 2020

Delta Industrial Automation TPEditor

Original release date: August 06, 2020
Vulnerabilities: Out-of-bounds Read, Stack-based Buffer Overflow, Heap-based Buffer Overflow, Write-what-where Condition, Improper Input Validation
4. MITIGATIONS
Delta Electronics recommends affected users update to the latest version of Delta Industrial Automation TPEditor, Version 1.98
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 6, 2020

Geutebrück G-Cam and G-Code

Original release date: August 06, 2020
Vulnerability: OS Command Injection
4. MITIGATIONS
Geutebrück recommends users update to firmware Version 1.12.0.27
Click to expand...

ronjor · Aug 6, 2020

Advantech WebAccess HMI Designer

Original release date: August 06, 2020
Vulnerabilities: Heap-based Buffer Overflow, Out-of-bounds Read, Out-of-bounds Write, Type Confusion, Stack-based Buffer Overflow, Double Free
4. MITIGATIONS
Advantech has released Version 2.1.9.81 of WebAccess HMI Designer to address the reported vulnerabilities. Users can download the latest version of WebAccess HMI Designer.
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Aug 6, 2020

Trailer Power Line Communications

Original release date: August 06, 2020
Vulnerability: Exposure of Sensitive Information Through Sent Data
4. MITIGATIONS
No current mitigations have been developed alongside this research. Future designs can mitigate this issue by reducing radiated emissions using shorter lengths of PLC buses and reduced transmit voltage. The goal of this advisory is to bring awareness of the issue to the transportation systems sector.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 11, 2020

Siemens PROFINET DCP (Update R)

Original release date: August 11, 2020
Vulnerabilities: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-129-02 Siemens devices using the PROFINET Discovery and Configuration Protocol (Update Q) that was published July 14, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens OPC UA Protocol Stack Discovery Service (Update D)

Original release date: August 11, 2020
Vulnerabilities: Improper restriction of XML external entity reference
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-17-243-01 Siemens OPC UA Protocol Stack Discovery Service (Update C) that was published February 5, 2019, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens Industrial Products (Update P)

Original release date: August 11, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-17-339-01 Siemens Industrial Products (Update O) published July 14, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update I)

Original release date: August 11, 2020
Vulnerability: Out-of-bounds Read
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-099-06 Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update H) that was published June 9, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens Industrial Products (Update H)

Original release date: August 11, 2020
Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the updated advisory titled ICSA-19-253-03 Siemens Industrial Products (Update G) that was published June 9, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens PROFINET Devices (Update G)

Original release date: August 11, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-02 Siemens PROFINET Devices (Update F) that was published July 14, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens Industrial Real-Time (IRT) Devices (Update D)

Original release date: August 11, 2020
Vulnerability: Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-19-283-01 Siemens Industrial Real-Time (IRT) Devices (Update C) that was published March 10, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens SCALANCE S-600 (Update A)

Original release date: August 11, 2020
Vulnerabilities: Resource Exhaustion, Cross-site Scripting
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-042-10 Siemens SCALANCE S-600 that was published February 11, 2020 on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens PROFINET-IO Stack (Update B)

Original release date: August 11, 2020
Vulnerability: Uncontrolled Resource Consumption
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-042-04 Siemens PROFINET-IO Stack (Update A) that was published March 10, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens Industrial Products SNMP Vulnerabilities (Update B)

Original release date: August 11, 2020
Vulnerabilities: Data Processing Errors, NULL Pointer Dereference
2. UPDATE INFORMATION
This updated advisory is a follow-up to the advisory update titled ICSA-20-042-02 Siemens Industrial Products SNMP Vulnerabilities (Update A) that was published July 14, 2020, on the ICS webpage on us-cert.gov
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches