The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jun 16, 2022

Siemens SCALANCE LPE 4903 and SINUMERIK Edge June 16, 2022

This advisory contains mitigations for an Out-of-bounds Write vulnerability in Siemens SCALANCE LPE 4903 and SINUMERIK Edge.
Click to expand...

ronjor · Jun 16, 2022

Siemens SINEMA Remote Connect Server June 16, 2022

This advisory contains mitigations for multiple vulnerabilities in the Siemens SINEMA Remote Connect Server.
Click to expand...

ronjor · Jun 16, 2022

Siemens SIMATIC WinCC (Update A) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-22-132-06 Siemens SIMATIC WinCC (Update A) that was published May 12, 2022, to the ICS webpage at cisa.gov/ics. This advisory contains mitigations for an Insecure Default Initialization of Resource vulnerability in SIMATIC PCS and WinCC industrial products.
Click to expand...

ronjor · Jun 16, 2022

Siemens Desigo PXC and DXR Devices (Update A) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-132-10 Siemens SIMATIC WinCC (Update A) that was published May 12, 2022, to the ICS webpage at cisa.gov/ics. This advisory contains mitigations for an Uncaught Exception vulnerability in the Siemens Desigo DXR and PXC controllers.
Click to expand...

ronjor · Jun 16, 2022

Siemens Industrial Devices using libcurl (Update A) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-13 Siemens Industrial Devices using libcurl that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Use After Free vulnerability in Siemens Industrial Devices using libcurl.
Click to expand...

ronjor · Jun 16, 2022

Siemens Teamcenter (Update A) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-16 Siemens Teamcenter that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in the Siemens Teamcenter product lifecycle management software.
Click to expand...

ronjor · Jun 16, 2022

Siemens PROFINET Stack Integrated on Interniche Stack (Update A) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-104-06 Siemens PROFINET Stack Integrated on Interniche Stack that was published April 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens PROFINET Stack Integrated on Interniche Stack.
Click to expand...

ronjor · Jun 16, 2022

Siemens Mendix (Update A) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-104-07 Siemens Mendix that was published April 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Siemens Mendix, a software platform to build mobile and web applications.
Click to expand...

ronjor · Jun 16, 2022

Siemens RUGGEDCOM Devices (Update B) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-22-069-01 Siemens RUGGEDCOM Devices (Update A) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Missing Encryption of Sensitive Data vulnerability in devices using the Siemens RUGGEDCOM software platform.
Click to expand...

ronjor · Jun 16, 2022

Siemens Industrial Products LLDP (Update B) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update A) that was published August 10, 2021, on the ICS webpage on cisa.gov/ics. This advisory includes mitigations for Classic Buffer Overflow, and Uncontrolled Resource Consumption vulnerabilities in Siemens Industrial Products (LLDP).
Click to expand...

ronjor · Jun 16, 2022

Siemens Linux-based Products (Update H) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-131-03 Siemens Linux-based Products (Update G) that was published December 16, 2021, to the ICS webpage at cisa.gov/ics. This advisory contains mitigations for a Use of Insufficiently Random Values vulnerability in Siemens Linux Based products.
Click to expand...

ronjor · Jun 16, 2022

Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update C) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-105-08 Siemens KTK, SIDOOR, SIMATIC, and SINAMICS (Update B) that was published March 9, 2021, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in Siemens KTN, SIDOOR, SIMATIC, and SINAMICS products.
Click to expand...

ronjor · Jun 16, 2022

Siemens PROFINET-IO Stack (Update H)

This updated advisory is a follow-up to the advisory update titled ICSA-20-042-04 Siemens PROFINET-IO Stack (Update G) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Internal Resource Allocation vulnerability in the Siemens PROFINET-IO Stack, which could be exploited to create a denial-of-service condition in products that include the vulnerable stack.
Click to expand...

ronjor · Jun 16, 2022

Siemens SCALANCE X Switches (Update B) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-014-03 Siemens SCALANCE X Switches (Update A) that was published February 10, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in Siemens SCALANCE X switches.
Click to expand...

ronjor · Jun 16, 2022

Siemens TIA Portal (Update E) June 16, 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-014-05 Siemens TIA Portal (Update D) that was published May 12, 2021, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for a Path Traversal Vulnerability in the Siemens TIA Portal engineering framework.
Click to expand...

ronjor · Jun 16, 2022

Siemens BACnet Field Panels (Update A) June 16, 2022

This updated advisory is a follow-up to the original advisory titled ICSA-17-285-05 Siemens BACnet Field Panels that was published October 12, 2017, on the ICS webpage on cisa.gov/ics. This advisory contains mitigation details for Authentication Bypass Using an Alternate Path or Channel, and Path Traversal vulnerabilities in Siemens BACnet field panels.
Click to expand...

ronjor · Jun 21, 2022

Siemens WinCC OA

Original release date: June 21, 2022
Vulnerability: Use of Client-side Authentication
CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology (OT) vendors. CISA is issuing this advisory to provide notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Jun 21, 2022

Phoenix Contact Classic Line Industrial Controllers

Original release date: June 21, 2022
Vulnerability: Missing Authentication for Critical Function
CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology (OT) vendors. CISA is issuing this advisory to provide notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Jun 21, 2022

Phoenix Contact ProConOS and MULTIPROG

Original release date: June 21, 2022
Vulnerability: Insufficient Verification of Data Authenticity
CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology (OT) vendors. CISA is issuing this advisory to provide notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Jun 21, 2022

Phoenix Contact Classic Line Controllers

Original release date: June 21, 2022
Vulnerability: Insufficient Verification of Data Authenticity
Click to expand...

ronjor · Jun 21, 2022

JTEKT TOYOPUC

Original release date: June 21, 2022
Vulnerability: Missing Authentication for Critical Function
CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in multiple operational technology (OT) vendors. CISA is issuing this advisory to provide notice of the reported vulnerabilities and identify baseline mitigations for reducing risks to these and other cybersecurity attacks.
Click to expand...

ronjor · Jun 21, 2022

Mitsubishi Electric MELSEC Q and L Series

Original release date: June 21, 2022
Vulnerability: Improper Resource Locking
Click to expand...

ronjor · Jun 23, 2022

Elcomplus SmartICS

Original release date: June 23, 2022
Vulnerabilities: Improper Access Control, Relative Path Traversal, Cross-site Scripting
Click to expand...

ronjor · Jun 23, 2022

Pyramid Solutions EtherNet/IP Adapter Development Kit

Original release date: June 23, 2022
Vulnerability: Out-of-bounds Write
Click to expand...

ronjor · Jun 23, 2022

Secheron SEPCOS Control and Protection Relay

Original release date: June 23, 2022
Vulnerabilities: Improper Enforcement of Behavioral Workflow, Lack of Administrator Control over Security, Improper Privilege Management, Insufficiently Protected Credentials, Improper Access Control
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches