The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jul 14, 2022

Siemens SIMATIC MV500 Devices

This advisory contains mitigations for Insufficient Session Expiration, and Missing Authentication for Critical Function vulnerabilities in the Siemens SIMATIC MV500 Devices Optical Readers.
Click to expand...

ronjor · Jul 14, 2022

Siemens Simcenter Femap

This advisory contains mitigations for an Out-of-bounds Write vulnerability in the Simcenter Femap complex model simulator.
Click to expand...

ronjor · Jul 14, 2022

Siemens RUGGEDCOM ROX

This advisory contains mitigations for a Command Injection vulnerability in the Siemens RUGGEDCOM ROX products.
Click to expand...

ronjor · Jul 14, 2022

Siemens Mendix Excel Importer

This advisory contains mitigations for an XML Entity Expansion vulnerability in the Mendix Excel Importer Module.
Click to expand...

ronjor · Jul 14, 2022

Siemens Datalogics File Parsing Vulnerability

This advisory contains mitigations for a Heap-based buffer Overflow vulnerability in Siemens Teamcenter Visualization products.
Click to expand...

ronjor · Jul 14, 2022

Siemens PADS Standard/Plus Viewer

This advisory contains mitigations for an Out-of-bounds Read, Out-of-bounds Write, and Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the PADS Standard and Standard Plus, a PCB schematic design and layout environment.
Click to expand...

ronjor · Jul 14, 2022

Siemens Simcenter Femap and Parasolid

This advisory contains mitigations for an Out-of-bounds Read vulnerability in Simcenter Femap, an advanced simulation application, and Parasolid, a 3D geometric modeling tool.
Click to expand...

ronjor · Jul 14, 2022

Siemens Mendix Applications

This advisory contains mitigations for an Injection Vulnerability in the Siemens Mendix Applications high productivity app platform.
Click to expand...

ronjor · Jul 14, 2022

Open Design Alliance Drawings SDK

This advisory contains mitigations for an Out-of-Bounds Read vulnerability in the Open Design Alliance Drawing SDK platform.
Click to expand...

ronjor · Jul 14, 2022

Siemens SRCS VPN Feature in SIMATIC CP Devices

This advisory contains mitigations for Heap-based Buffer Overflow, Command Injection, and Code Injection vulnerabilities in the Siemens SIMATIC CP Devices communication processors.
Click to expand...

ronjor · Jul 14, 2022

Siemens Mendix

This advisory contains mitigations for an Improper Access Control vulnerability in Siemens Mendix Applications, a high productivity app platform.
Click to expand...

ronjor · Jul 14, 2022

Siemens CPC80 Firmware of SICAM A8000

This advisory contains mitigations for a Missing Release of Resource after Effective Lifetime vulnerability in Siemens CPC firmware.
Click to expand...

ronjor · Jul 14, 2022

Siemens SIMATIC eaSie Core Package

This advisory contains mitigations for Improper Input Validation, and Missing Authentication for Critical Function vulnerabilities in the Siemens SIMATIC eaSie digital manager.
Click to expand...

ronjor · Jul 14, 2022

Siemens EN100 Ethernet Module

This advisory contains mitigations for an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Siemens EN100, an ethernet module.
Click to expand...

ronjor · Jul 14, 2022

Siemens Opcenter Quality

This advisory contains mitigations for an Incorrect Implementation of Authentication Algorithm vulnerability in the Siemens Opcenter quality management system.
Click to expand...

ronjor · Jul 14, 2022

Siemens RUGGEDCOM ROS

This advisory contains mitigations for an Improper Control of Generation of Code vulnerability in Siemens RUGGEDCOM ROS-based devices.
Click to expand...

ronjor · Jul 14, 2022

Siemens Industrial Products Intel CPUs (Update D)

This updated advisory is a follow-up to the advisory update titled ICSA-21-222-05 Siemens Industrial Products Intel CPU (Update C) that was published March 10, 2022, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigation for a Missing Encryption of Sensitive Data vulnerability in Siemens Industrial Products Intel CPUs.
Click to expand...

ronjor · Jul 14, 2022

Siemens SIMATIC Industrial Products (Update B)

This advisory update is a follow-up to the original advisory titled ICSA-22-041-01 Siemens Industrial Products (Update A) that was published February 10, 2022, to the ICS webpage on us-cert.cisa.gov. This advisory contains mitigations for Operation on a Resource after Expiration or Release, and Missing Release of Memory after Effective Lifetime vulnerabilities in Siemens SIMATIC Industrial Products.
Click to expand...

ronjor · Jul 14, 2022

Siemens SCALANCE X (Update D)

This updated advisory is a follow-up to the advisory update titled ICSA-19-085-01 Siemens SCALANCE X (Update C) that was published October 14, 2021, to the ICS webpage on us-cert.gov. This advisory contains mitigations for an Expected Behavior Violation vulnerability in Siemens SCALANCE X products.
Click to expand...

ronjor · Jul 14, 2022

Siemens TIA Administrator (Update A)

This updated advisory is a follow-up to the advisory update titled ICSA-21-104-16 Siemens TIA Administrator that was published April 14, 2022, to the ICS webpage on www.cisa.gov/uscert. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens TIA Administrator.
Click to expand...

ronjor · Jul 14, 2022

Siemens VxWorks-based Industrial Products (Update C)

This updated advisory is a follow-up to the advisory update titled ICSA-21-194-12 Siemens Wind River VxWorks-based Industrial Products (Update B) that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory includes mitigations for a Heap-based Buffer Overflow in Siemens Industrial Products incorporating the Wind River VxWorks product.
Click to expand...

ronjor · Jul 14, 2022

Siemens PROFINET Stack Integrated on Interniche Stack (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-104-06 Siemens PROFINET Stack Integrated on Interniche Stack (Update A) that was published June 16, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens PROFINET Stack Integrated on Interniche Stack.
Click to expand...

ronjor · Jul 14, 2022

Siemens Industrial Products with OPC UA (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-08 Siemens Industrial Products with OPC UA that was published May 12, 2022, on the ICS webpage on cisa.gov/ICS. This advisory contains mitigations for an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Siemens Industrial Products with OPC UA.
Click to expand...

ronjor · Jul 14, 2022

Siemens Mendix (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-104-07 Siemens Mendix (Update A) that was published June 16, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Siemens Mendix, a software platform to build mobile and web applications.
Click to expand...

ronjor · Jul 14, 2022

Siemens OpenSSL Affected Industrial Products (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-167-14 Siemens OpenSSL Affected Industrial Products that was published June 16, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Infinite Loop vulnerability in the Siemens OpenSSL Affected Industrial Products.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches