Log in or Sign up

The Increasing Threat to Network Infrastructure Devices and Recommended Mitigations

Discussion in 'other security issues & news' started by ronjor, Oct 4, 2016.

Thread Status:: Not open for further replies.

Page 98 of 136

ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Teamcenter (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-167-13 Siemens Teamcenter that was published June 16, 2022, to the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in versions of Teamcenter, a product lifecycle management software.
Click to expand...

ronjor, Aug 11, 2022

#2426
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Industrial Devices using libcurl (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-13 Siemens Industrial Devices using libcurl (Update A) that was published June 16, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for a Use After Free vulnerability in versions of Siemens Industrial Devices using libcurl.
Click to expand...

ronjor, Aug 11, 2022

#2427
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens SIMATIC WinCC and PCS (Update C)

This updated advisory is a follow-up to the advisory update titled ICSA-22-041-02 Siemens SIMATIC WinCC and PCS (Update B) that was published May 12, 2022, to the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for Exposure of Sensitive Information to an Unauthorized Actor and Insertion of Sensitive Information into Externally Accessible File or Directory vulnerabilities in versions of SIMATIC products.
Click to expand...

ronjor, Aug 11, 2022

#2428
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Teamcenter (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-16 Siemens Teamcenter (Update A) that was published June 16, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for Stack-based Buffer Overflow and Improper Restriction of XML External Entity Reference vulnerabilities in versions of Teamcenter, a product lifecycle management software.
Click to expand...

ronjor, Aug 11, 2022

#2429
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Industrial Products (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-12 Siemens Industrial Products (Update A) that was published Jul 14, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for an Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in versions of the OPC Foundation Local Discovery Server of Siemens industrial products.
Click to expand...

ronjor, Aug 11, 2022

#2430
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens RUGGEDCOM ROS (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-195-18 Siemens RUGGEDCOM ROS that was published July 14, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for an Improper Control of Generation of Code vulnerability in versions of RUGGEDCOM ROS-based devices.
Click to expand...

ronjor, Aug 11, 2022

#2431
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Simcenter Femap and Parasolid (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-195-09 Simcenter Femap and Parasolid that was published July 14, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for an Out-of-bounds Read vulnerability in versions of Simcenter Femap, an advanced simulation application, and Parasolid, a 3D geometric modeling tool.
Click to expand...

ronjor, Aug 11, 2022

#2432
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens SRCS VPN Feature in SIMATIC CP Devices (Update A)

This updated advisory is a follow-up to the original advisory titled ICSA-22-195-12 Siemens SRCS VPN Feature in SIMATIC CP Devices that was published July 14, 2022, on the ICS webpage on cisa.gov/ics.
This advisory contains mitigations for Heap-based Buffer Overflow, Command Injection, and Code Injection vulnerabilities in versions of SIMATIC CP Devices, communication processors.
Click to expand...

ronjor, Aug 11, 2022

#2433
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

CISA Adds Two Known Exploited Vulnerabilities to Catalog 

Original release date: August 11, 2022
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.
Click to expand...

ronjor, Aug 11, 2022

#2434
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Yokogawa CENTUM Controller FCS

This advisory contains mitigations for a Denial of Service vulnerability in CENTUM Controller FCS products.
Click to expand...

ronjor, Aug 16, 2022

#2435
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

LS ELEC PLC and XG5000

This advisory contains mitigations for an Inadequate Encryption Strength vulnerability in LS ELECTRIC PLC and XG5000, a PLC programming software.
Click to expand...

ronjor, Aug 16, 2022

#2436
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Delta Industrial Automation DRAS

This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Delta Industrial Automation DRAS, a controller software suite.
Click to expand...

ronjor, Aug 16, 2022

#2437
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Softing Secure Integration Server

This advisory contains mitigations for Out-of-bounds Read, Uncontrolled Search Path Element, Improper Authentication, Relative Path Traversal, Cleartext Transmission of Sensitive Information, NULL Pointer Dereference, and Integer Underflow vulnerabilities in various Softing products.
Click to expand...

ronjor, Aug 16, 2022

#2438
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

BR Industrial Automation Automation Studio 4

This advisory contains mitigations for an Unrestricted Upload of File with Dangerous Type vulnerability in Industrial Automation Automation Studio 4, a PLC automation programming software.
Click to expand...

ronjor, Aug 16, 2022

#2439
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Emerson Electric Proficy Machine Edition

This advisory contains mitigations for Missing Support for Integrity Check, Improper Access Control, Unrestricted Upload of File with Dangerous Type, Improper Verification of Cryptographic Signature, Insufficient Verification of Data Authenticity, and Path Traversal: ‘\..\filename’ vulnerabilities in Emerson Proficy Machine Edition, an engineering workstation.
Click to expand...

ronjor, Aug 16, 2022

#2440
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Sequi PortBloque S

This advisory contains mitigations for Improper Authentication and Improper Authorization vulnerabilities in Sequi PortBloque S, a serial Modbus firewall.
Click to expand...

ronjor, Aug 16, 2022

#2441
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Industrial Products with OPC UA (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-132-08 Siemens Industrial Products with OPC UA (Update A) that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for various Siemens Industrial Products with OPC UA products.
Click to expand...

ronjor, Aug 16, 2022

#2442
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Linux-based Products (Update J) 18 Aug 2022

This updated advisory is a follow-up to the advisory update titled ICSA-21-131-03 Siemens Linux-based Products (Update I) that was published August 11, 2022, to the ICS webpage at www.cisa.gov/ics. This advisory contains mitigations for a Use of Insufficiently Random Values vulnerability in versions of Siemens Linux-based products.
Click to expand...

ronjor, Aug 18, 2022

#2443
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens Industrial Products LLDP (Update D)

This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update C) that was published August 11, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Classic Buffer Overflow and Uncontrolled Resource Consumption vulnerabilities in various Siemens industrial products.
Click to expand...

ronjor, Aug 18, 2022

#2444
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Siemens OpenSSL Affected Industrial Products (Update B)

This updated advisory is a follow-up to the original advisory titled ICSA-22-167-14 Siemens OpenSSL Affected Industrial Products (Update A) that was published July 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Infinite Loop vulnerability in various Siemens Industrial products.
Click to expand...

ronjor, Aug 18, 2022

#2445
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update A)

This updated advisory is a follow-up to the advisory titled ICSA-22-221-01 Mitsubishi Electric MELSEC Q and L Series that was published June 21, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R, Q, L and MELIPC series products.
Click to expand...

ronjor, Aug 18, 2022

#2446
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

Mitsubishi Electric Multiple Factory Automation Products (Update A)

This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric GT SoftGOT2000 that was published August 9, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigation for Infinite Loop and OS Command Injection vulnerabilities in various Mitsubishi Electric factory automation products.
Click to expand...

ronjor, Aug 18, 2022

#2447
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

Original release date: August 18, 2022
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the “Date Added to Catalog” column, which will sort by descending dates.
Click to expand...

ronjor, Aug 18, 2022

#2448
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

CISA Adds One Known Exploited Vulnerabilities to Catalog

Original release date: August 22, 2022
CISA has added a new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, click on the arrow in the "Date Added to Catalog" column, which will sort by descending dates.   
Click to expand...

ronjor, Aug 22, 2022

#2449
ronjor Global Moderator

Joined:

Jul 21, 2003

Posts:

177,726

Location:

Texas

ARC Informatique PcVue 23 Aug 2022

This advisory contains mitigations for a Cleartext Storage of Sensitive Information vulnerability in various components of ARC Informatique products.
Click to expand...

ronjor, Aug 23, 2022

#2450

Page 98 of 136

Thread Status:: Not open for further replies.

This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Accept Learn More...