The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor · Jul 14, 2022

Siemens SIMATIC WinCC (Update E)

This updated advisory is a follow-up to the advisory update titled ICSA-21-315-03 Siemens SIMATIC WinCC (Update D) that was published April 14, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Path Traversal, and Insertion of Sensitive Information into Log File vulnerabilities in the Siemens SIMATIC WinCC.
Click to expand...

ronjor · Jul 14, 2022

Siemens Industrial PCs and CNC devices (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-05 Siemens Industrial PCs and CNC devices that was published May 12, 2022, on the ICS webpage on cisa.gov/ICS. This advisory contains mitigations for Improper Input Validation, Improper Authentication, Improper Isolation of Shared Resources on System-on-a-Chip, and Improper Privilege Management vulnerabilities in Siemens Industrial PCs and CNC devices.
Click to expand...

ronjor · Jul 14, 2022

Siemens Industrial Products (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-12 Siemens Industrial Products that was published May 12, 2022, on the ICS webpage on cisa.gov/ICS. This advisory contains mitigations for an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the OPC Foundation Local Discovery Server in multiple Siemens industrial products.
Click to expand...

ronjor · Jul 19, 2022

Dahua ASI7213X-T1 (Update A)
Original release date: July 19, 2022
Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Authentication Bypass by Capture-replay, Generation of Error Message Containing Sensitive Information

ronjor · Jul 19, 2022

MiCODUS MV720 GPS tracker

Original release date: July 19, 2022
Vulnerabilities: Use of Hard-coded Credentials, Improper Authentication, Cross-site Scripting, Authorization Bypass Through User-controlled Key
Click to expand...

ronjor · Jul 21, 2022

ABB Drive Composer, Automation Builder, Mint Workbench 21 July 2022

This advisory contains mitigations for an Improper Privilege Management vulnerability in ABB Drive Composer, Automation Builder, and Mint Workbench products.
Click to expand...

ronjor · Jul 21, 2022

Johnson Controls Metasys ADS, ADX, OAS 21 July 2022

This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in Johnson Controls Metasys ADS, ADX, OAS with MUI products.
Click to expand...

ronjor · Jul 21, 2022

Rockwell Automation ISaGRAF Workbench 21 July 2022

This advisory contains mitigations for Deserialization of Untrusted Data and Path Travel vulnerabilities in ISaGRAF Workbench, an automation development tool.
Click to expand...

ronjor · Jul 21, 2022

ICONICS Suite and Mitsubishi Electric MC Works64 Products 21 July 2022

This advisory contains mitigations for Path Traversal, Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere, Out-of-Bounds Read vulnerabilities in SCADA products.
Click to expand...

ronjor · Jul 21, 2022

Automation Direct Stride Field IO 21 July 2022

This advisory contains mitigations for a Cleartext Transmission of Sensitive Information vulnerability in AutomationDirect Stride Field I/O products.
Click to expand...

ronjor · Jul 21, 2022

Rockwell Automation ISaGRAF (Update A) 21 July 2022

This updated advisory is a follow-up to the original advisory titled Rockwell Automation ISaGRAF that was published March 29, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Rockwell Automation ISaGRAF software products.
Click to expand...

ronjor · Jul 26, 2022

Inductive Automation Ignition 26 July 2022

This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in versions of Inductive Automation Ignition software.
Click to expand...

ronjor · Jul 26, 2022

Honeywell Safety Manager 26 July 2022

This advisory contains mitigations for Insufficient Verification of Data Authenticity, Missing Authentication for Critical Function, and Use of Hard-coded Credentials vulnerabilities in Honeywell Safety Manager, a safety solution of the Experion Process Knowledge System.
Click to expand...

ronjor · Jul 26, 2022

Honeywell Saia Burgess PG5 26 July 2022

This advisory contains mitigations for Authentication Bypass and Use of a Broken or Risky Cryptographic Algorithm vulnerabilities in Honeywell Saia Burgess PG5 PCD, a PLC.
Click to expand...

ronjor · Jul 26, 2022

MOXA NPort 5110 26 July 2022

This advisory contains mitigations for an Out-of-bounds Write vulnerability in MOXA NPort 5110, a device server.
Click to expand...

ronjor · Jul 26, 2022

Mitsubishi MELSEC and MELIPC Series (Update D) 26 July 2022

This updated advisory is a follow up to the advisory update titled ICSA-21-334-02 Mitsubishi Electric MELSEC and MELIPC Series (Update C) that was published June 7, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Uncontrolled Resource Consumption, Improper Handling of Length Parameter Inconsistency, and Improper Input Validation vulnerabilities in Mitsubishi Electric MELSEC and MELIPC Series industrial computers.
Click to expand...

ronjor · Jul 28, 2022

Rockwell Products Impacted by Chromium Type Confusion Vulnerability 28 July 2022

This advisory contains mitigations for a Type Confusion vulnerability in various Rockwell Automation products.
Click to expand...

ronjor · Jul 28, 2022

Mitsubishi FA Engineering Software (Update B) 28 July 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-350-05 Mitsubishi Electric FA Engineering Software (Update A) that was published December 16, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Out-of-bounds Read and Integer Underflow vulnerabilities in Mitsubishi Electric FA Engineering Software, an engineering software suite.
Click to expand...

ronjor · Jul 28, 2022

Mitsubishi Electric Factory Automation Engineering Software (Update C) 28 July 2022

This updated advisory is a follow-up to the advisory update titled ICSA-20-212-02 Mitsubishi Electric Factory Automation Engineering Software (Update B) that was published May 31, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for a Permission Issues vulnerability in Mitsubishi Electric Factory Automation Engineering Software.
Click to expand...

ronjor · Jul 29, 2022

CISA Adds One Known Exploited Vulnerability to Catalog

Original release date: July 29, 2022
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.
Click to expand...

ronjor · Aug 2, 2022

Mitsubishi Electric Factory Automation Products Path Traversal (Update C)

This updated advisory is a follow-up to the advisory update titled ICSA-20-212-03 Mitsubishi Electric Factory Automation Products Path Traversal (Update B) that was published May 27, 2021, to the ICS webpage on us-cert.cisa.gov. This advisory contains mitigations for a Path Traversal vulnerability in various Mitsubishi Electric Factory Automation products.
Click to expand...

ronjor · Aug 2, 2022

Mitsubishi Electric Factory Automation Engineering Products (Update H)

This updated advisory is a follow-up to the advisory update titled ICSA-20-212-04 Mitsubishi Electric Factory Automation Engineering Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Unquoted Search Path or Element vulnerability in various Mitsubishi Electric Factory Automation Engineering products.
Click to expand...

ronjor · Aug 2, 2022

Mitsubishi Electric FA Engineering Software Products (Update F)

This updated advisory is a follow-up to the advisory update titled ICSA-21-049-02 Mitsubishi Electric FA Engineering Software Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Heap-based Buffer Overflow and Improper Handling of Length Parameter Inconsistency vulnerabilities in various Mitsubishi Electric FA Engineering Software products that communicate with MELSEC, FREQROL, or GOT products.
Click to expand...

ronjor · Aug 2, 2022

Delta Electronics DIAEnergie (Update C)

This updated advisory is a follow-up to the advisory update titled ICSA-21-238-03 Delta Electronics DIAEnergie (Update B) that was published March 22, 2022, on the ICS webpage at www.cisa.gov/ics. This advisory contains mitigations for Use of Password Hash with Insufficient Computational Effort, Authentication Bypass Using an Alternate Path or Channel, Unrestricted Upload of File with Dangerous Type, SQL Injection, Cross-site Request Forgery, Cross-site Scripting, and Cleartext Transmission of Sensitive Information vulnerabilities in Delta Electronics DIAEnergie, an industrial energy management system.
Click to expand...

ronjor · Aug 2, 2022

Delta Electronics DIAEnergie (Update C)

This updated advisory is a follow-up to the advisory update titled ICSA-22-081-01 Delta Electronics DIAEnergie (Update B) that was published April 28, 2022, on the ICS webpage at cisa.gov/ics. This advisory contains mitigations for Path Traversal, Incorrect Default Permissions, SQL Injection, and Uncontrolled Search Path Element vulnerabilities in Delta electronics DIAEnergie, an industrial energy management system.
Click to expand...

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

ronjor Global Moderator

Useful Searches