The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · May 12, 2022

Mitsubishi Electric MELSOFT iQ AppPortal 12 May 2022

This advisory contains mitigations for Missing Authorization, Out-of-bounds Write, NULL Pointer Dereference, Classic Buffer Overflow, HTTP Request Smuggling, and Infinite Loop vulnerabilities in Mitsubishi Electric MELSOFT iQ AppPortal products.
Click to expand...

ronjor · May 12, 2022

Inkscape in Industrial Products 12 May 2022

This advisory contains mitigations for Out-of-bounds Read, Access of Uninitialized Pointer, and Out-of-bounds Write vulnerabilities in the Inkscape open-source graphics editor.
Click to expand...

ronjor · May 12, 2022

Cambium Networks cnMaestro 12 May 2022

This advisory contains mitigations for OS Command Injection, SQL Injection, Path Traversal, and Use of Potentially Dangerous Function vulnerabilities in the Cambium Networks cnMaestro network management system.
Click to expand...

ronjor · May 12, 2022

Siemens Industrial PCs and CNC devices 12 May 2022

This advisory contains mitigations for Improper Input Validation, Improper Authentication, Improper Isolation of Shared Resources on System-on-a-Chip, and Improper Privilege Management vulnerabilities in Siemens Industrial PCs and CNC devices.
Click to expand...

ronjor · May 12, 2022

Siemens SIMATIC WinCC 12 May 2022

This advisory contains mitigations for an Insecure Default Initialization of Resource vulnerability in SIMATIC PCS and WinCC industrial products.
Click to expand...

ronjor · May 12, 2022

Siemens SICAM P850 and SICAM P855 12 May 2022

This advisory contains mitigations for Improper Neutralization of Parameter/Argument Delimiters, Cleartext Transmission of Sensitive Information, Cross-site Scripting, Missing Authentication for Critical Function, Authentication Bypass by Capture-replay, and Improper Authentication vulnerabilities in Siemens SICAM P850 and SICAM P855 electrical variable measuring devices.
Click to expand...

ronjor · May 12, 2022

Siemens Industrial Products with OPC UA 12 May 2022

This advisory contains mitigations for a Null Pointer Dereference vulnerability in Siemens industrial products using the OPC UA AMSOC stack.
Click to expand...

ronjor · May 12, 2022

Siemens JT2GO and Teamcenter Visualization 12 May 2022

This advisory contains mitigations for Infinite Loop, Null Pointer Dereference, Integer Overflow to Buffer Overflow, Double Free, and Access of Uninitialized Pointer vulnerabilities in Siemens JT2GO, Teamcenter Visualization products.
Click to expand...

ronjor · May 12, 2022

Siemens Desigo PXC and DXR Devices 12 May 2022

This advisory contains mitigations for an Uncaught Exception vulnerability in the Siemens Desigo DXR and PXC controllers.
Click to expand...

ronjor · May 12, 2022

Siemens SIMATIC CP 44x-1 RNA 12 May 2022

This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens SIMATIC CP 44x-1 RNA.
Click to expand...

ronjor · May 12, 2022

Siemens Industrial Products 12 May 2022

This advisory contains mitigations for an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the OPC Foundation Local Discovery Server in multiple Siemens industrial products.
Click to expand...

ronjor · May 12, 2022

Siemens Industrial Devices using libcurl 12 May 2022

This advisory contains mitigations for a Use After Free vulnerability in Siemens Industrial Devices using libcurl.
Click to expand...

ronjor · May 12, 2022

Siemens Simcenter Femap 12 May 2022

This advisory contains mitigations for an Out-of-bounds Write vulnerability in the Siemens Simcenter Femap advanced simulation application.
Click to expand...

ronjor · May 12, 2022

Siemens OpenV2G 12 May 2022

This advisory contains mitigations for a Classic Buffer Overflow vulnerability in the open-source implementation of the ISO/IEC vehicle-to-grid communication interface (V2G CI) standard.
Click to expand...

ronjor · May 12, 2022

Siemens Teamcenter 12 May 2022

This advisory contains mitigations for Stack-based Buffer Overflow, and Improper Restriction of XML External Entity Reference vulnerabilities in the Siemens Teamcenter product lifecycle management software.
Click to expand...

ronjor · May 12, 2022

Siemens OpenSSL Vulnerabilities in Industrial Products (Update A) 12 May 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-104-05 Siemens OpenSSL Vulnerabilities in Industrial Products that was published April 14, 2022, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for a NULL Pointer Dereference vulnerability in the Siemens OpenSSL.
Click to expand...

ronjor · May 12, 2022

Mitsubishi Electric GT25-WLAN (Update A) 12 May 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-102-04 Mitsubishi Electric GT25-WLAN that was published April 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Improper Removal of Sensitive Information Before Storage or Transfer, Inadequate Encryption Strength, Missing Authentication for Critical Function, Injection, and Improper Input Validation vulnerabilities in Mitsubishi Electric GT25-WLAN wireless communication units.
Click to expand...

ronjor · May 12, 2022

Siemens SIMATIC WinCC and PCS (Update B) 12 May 2022
This updated advisory is a follow-up to the advisory update titled ICSA-21-315-03 Siemens SIMATIC WinCC (Update C) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Path Traversal, and Insertion of Sensitive Information into Log File vulnerabilities in Siemens SIMATIC WinCC, a SCADA HMI system.

ronjor · May 12, 2022

Siemens SIMATIC WinCC (Update D) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-315-03 Siemens SIMATIC WinCC (Update C) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Path Traversal, and Insertion of Sensitive Information into Log File vulnerabilities in Siemens SIMATIC WinCC, a SCADA HMI system.
Click to expand...

ronjor · May 12, 2022

Siemens Nucleus RTOS-based APOGEE and TALON (Update C) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-315-07 Siemens Nucleus RTOS-based APOGEE and TALON Products (Update B) that was published April 14, 2022, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for several vulnerabilities in Siemens Nucleus RTOS-based APOGEE and TALON direct digital control (DDC) devices.
Click to expand...

ronjor · May 12, 2022

Siemens VxWorks-based Industrial Products (Update B) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-194-12 Siemens Wind River VxWorks-based Industrial Products (Update A) that was published April 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory includes mitigations for a Heap-based Buffer Overflow in Siemens Industrial Products incorporating the Wind River VxWorks product.
Click to expand...

ronjor · May 12, 2022

Siemens SIMATIC RFID (Update B) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-159-13 Siemens SIMATIC RFID Readers (Update A) that was published April 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in Siemens Simatic RFID industrial hardware systems.
Click to expand...

ronjor · May 12, 2022

Siemens SIMOTICS, Desigo, APOGEE, and TALON (Update D) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-105-06 Siemens SIMOTICS, Desigo, APOGEE, and TALON (Update C) that was published April 14, 2021, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for a Business Logic Errors vulnerability in Siemens SIMOTICS, Desigo, APOGEE, and TALON products.
Click to expand...

ronjor · May 12, 2022

Siemens SCALANCE and SIMATIC (Update H) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-105-07 Siemens SCALANCE & SIMATIC (Update G) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Resource Exhaustion vulnerability in Siemens SCALANCE and SIMATIC products.
Click to expand...

ronjor · May 12, 2022

Siemens TIA Portal (Update D) 12 May 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-014-05 Siemens TIA Portal (Update C) that was published December 16, 2021, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for a Path Traversal vulnerability in the Siemens TIA Portal engineering framework.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches