The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Aug 11, 2020

Siemens SCALANCE & SIMATIC (Update A)

Original release date: August 11, 2020
Vulnerability: Resource Exhaustion
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-105-07 Siemens SCALANCE & SIMATIC that was published April 14, 2020 on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update B)

Original release date: August 11, 2020
Vulnerability: Unquoted Search Path or Element
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-161-04 Siemens SIMATIC, SINAMICS, SINEC, SINEMA, SINUMERIK (Update A) that was published July 14, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens Opcenter Execution Core (Update A)

Original release date: August 11, 2020
Vulnerabilities: Cross-site Scripting, SQL Injection, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-196-07 Siemens Opcenter Execution Core that was published July 14, 2020, on the ICS webpage.
Click to expand...

ronjor · Aug 11, 2020

Siemens UMC Stack (Update A)

Original release date: August 11, 2020
Vulnerabilities: Unquoted Search Path or Element, Uncontrolled Resource Consumption, Improper Input Validation
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-196-05 Siemens UMC Stack that was published July 14, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 11, 2020

Siemens SICAM A8000 RTUs

Original release date: August 11, 2020
Vulnerability: Cross-site Scripting
4. MITIGATIONS
Siemens recommends users update to the latest version, v05.30
. Applying the update causes the device/module to go through a single restart cycle. Siemens also recommends users:
Click to expand...

ronjor · Aug 11, 2020

Siemens Automation License Manager

Original release date: August 11, 2020
Vulnerability: Improper Authorization
4. MITIGATIONS
Siemens recommends the following:
Users of License Manager 5: Disable access to drives which have licenses installed, for non-administrator users.
Users of License Manager 6: Update to v6.0.8 or later version.
Click to expand...

ronjor · Aug 11, 2020

Siemens Desigo CC

Original release date: August 11, 2020
Vulnerability: Code Injection
4. MITIGATIONS
Siemens has released patches for the affected products and recommends specific countermeasures for unpatched systems:
Users of Version 4.x, apply the latest patch
(Login required).
Users of Version 3.x, apply the latest patch
(Login required).
Click to expand...

ronjor · Aug 11, 2020

Siemens SIMATIC, SIMOTICS

Original release date: August 11, 2020
Vulnerability: TOCTOU Race Condition
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
SIMATIC RF350M and RF650M: Disable Wi-Fi, if possible
SIMOTICS CONNECT 400: No specific countermeasures needed as the data is protected via TLS on application layer
Click to expand...

ronjor · Aug 11, 2020

Siemens SCALANCE, RUGGEDCOM

Original release date: August 11, 2020
Vulnerability: Classic Buffer Overflow
4. MITIGATIONS
Siemens recommends applying the following updates:
RUGGEDCOM RM1224: Update to v6.3
SCALANCE M-800: Update to v6.3
Click to expand...

ronjor · Aug 11, 2020

Tridium Niagara

Original release date: August 11, 2020
Vulnerability: Synchronous Access of Remote Resource without Timeout
4. MITIGATIONS
Tridium has released updates that mitigate this vulnerability and recommends users update to the versions identified below:
Niagara 4.9.0.198
Niagara Enterprise Security 4.9.0.60
Click to expand...

ronjor · Aug 11, 2020

Schneider Electric APC Easy UPS On-Line

Original release date: August 11, 2020
Vulnerabilities: Path Traversal
4. MITIGATIONS
Schneider Electric recommends users of versions below v2.1 to update to the latest version as soon as possible.
Please see the Schneider Electric Security Bulletin – SEVD-2020-224-01
for more details of these vulnerabilities.
Click to expand...

ronjor · Aug 11, 2020

Yokogawa CENTUM

Original release date: August 11, 2020
Vulnerabilities: Improper Authentication, Path Traversal
4. MITIGATIONS
Yokogawa reports the following mitigations:
Click to expand...

ronjor · Aug 20, 2020

Treck TCP/IP Stack (Update G)

Original release date: August 20, 2020
Vulnerabilities: Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or Wraparound, Improper Null Termination, Improper Access Control
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSA-20-168-01 Treck TCP/IP Stack (Update E) that was published July 21, 2020, to the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Aug 20, 2020

ICS Medical Advisory (ICSMA-20-233-01)

Philips SureSigns VS4
Original release date: August 20, 2020
Vulnerabilities: Improper Input Validation, Improper Access Control, Improper Authentication
Click to expand...

4. MITIGATIONS
As a mitigation to these vulnerabilities, Philips recommends users change all system passwords on the SureSigns VS4 with unique passwords for each device and secure the device when not in use to prevent unauthorized access, as referenced in the Installation and Configuration Guide available on Incenter. Philips also recommends users consider replacing the SureSigns VS4 device with a newer technology.
Users with questions regarding specific SureSigns VS4 patient monitor installations and upgrade options should contact Philips service support or regional service support
or call 1-800-722-9377.
Please see the Philips advisory for vulnerabilities discussed in this disclosure, and visit the Philips product security website for the latest security information for Philips products.
Click to expand...

ronjor · Aug 25, 2020

Advantech iView

Original release date: August 25, 2020
Vulnerability: Path Traversal
4. MITIGATIONS
Advantech has released Version 5.7.02 of iView to address the reported vulnerability. Users can download the latest version of iView
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 25, 2020

Emerson OpenEnterprise

Original release date: August 25, 2020
Vulnerability: Inadequate Encryption Strength
4. MITIGATIONS
Emerson recommends all users upgrade to OpenEnterprise 3.3, Service Pack 6 (3.3.6), to resolve this issue. OpenEnterprise Service Packs are available to users with access to the Emerson SupportNet system
(login required). Details will be found in the downloads area.
Click to expand...

ronjor · Aug 25, 2020

WECON LeviStudioU

Original release date: August 25, 2020
Vulnerability: Stack-based Buffer Overflow
4. MITIGATIONS
WECON is aware of the issue and is currently developed a solution. For more information, contact WECON online or by phone: 0086-591-87868869-894
CISA recommends users take the following measures to protect themselves from social engineering attacks:
Click to expand...

ronjor · Aug 27, 2020

Red Lion N-Tron 702-W, 702M12-W

Original release date: August 27, 2020
Vulnerabilities: Reflected Cross-site Scripting, Stored Cross-site Scripting, Cross-site Request Forgery, Hidden Functionality, Use of Unmaintained Third-Party Components
4. MITIGATIONS
Red Lion’s 702-W Series was discontinued in 2018 and cannot be updated. Red Lion recommends these products be used locally within a secure network.
CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Specifically, users should:
Click to expand...

ronjor · Aug 27, 2020

ICS Medical Advisory (ICSMA-20-184-01)
OpenClinic GA (Update A)
Original release date: August 27, 2020

Vulnerabilities: Authentication Bypass Using an Alternate Path or Channel, Improper Restriction of Excessive Authentication Attempts, Improper Authentication, Missing Authorization, Execution with Unnecessary Privileges, Unrestricted Upload of File with Dangerous Type, Path Traversal, Improper Authorization, Cross-site Scripting, Use of Unmaintained Third-Party Components, Insufficiently Protected Credentials, Hidden Functionality
2. UPDATE INFORMATION
This updated advisory is a follow-up to the original advisory titled ICSMA-20-184-01 OpenClinic GA that was published July 2, 2020, on the ICS webpage on us-cert.gov.
Click to expand...

ronjor · Sep 1, 2020

Mitsubishi Electric Multiple Products

Original release date: September 01, 2020
Vulnerability: Predictable Exact Value from Previous Values
4. MITIGATIONS
Mitsubishi Electric recommends that users take the following mitigation measures to minimize the risk of exploiting this vulnerability:
Click to expand...

ronjor · Sep 8, 2020

Siemens SIMATIC RTLS Locating Manager

Original release date: September 08, 2020
Vulnerabilities: Incorrect Default Permissions, Unquoted Search Path or Element
4. MITIGATIONS
Siemens recommends that users apply the update of the SIMATIC RTLS Locating Manager: v2.10.2
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Sep 8, 2020

Siemens SIMATIC S7-300 and S7-400 CPUs

Original release date: September 08, 2020
Vulnerability: Insufficiently Protected Credentials
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

ronjor · Sep 8, 2020

Siemens License Management Utility

Original release date: September 08, 2020
Vulnerability: Execution with Unnecessary Privileges
4. MITIGATIONS
Siemens has released an updated version (v2.4
) of LMU, and recommends users install this update on all affected systems.
Siemens has identified the following specific workarounds and mitigations users can apply to reduce risk:
Click to expand...

ronjor · Sep 8, 2020

Siemens Spectrum Power

Original release date: September 08, 2020
Vulnerabilities: Cleartext Storage of Sensitive Information, Exposure of Information Through Directory Listing
4. MITIGATIONS
Siemens has released updates and configuration recommendations for Spectrum Power 4 to mitigate the issues. Please contact a Siemens representative for further information.
Click to expand...

ronjor · Sep 8, 2020

Siemens Siveillance Video Client

Original release date: September 08, 2020
Vulnerability: Cleartext Transmission of Sensitive Information
4. MITIGATIONS
Siemens has identified the following specific workarounds and mitigations users can apply to reduce the risk:
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches