Bulletins | CERT@VDE

1
2
3 (current)

Dienstag, 11.10.2022

02:00

SIEMENS CERT

SSA-280624 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SCALANCE W1750D

Titel

SSA-280624 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SCALANCE W1750D

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf

Text

The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has released updates for the SCALANCE W1750D and recommends to update to the latest version. Siemens ...

02:00

SIEMENS CERT

SSA-258115 V1.0: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9

Titel

SSA-258115 V1.0: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-258115.pdf

Text

Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote code execution in the context of the current ...

02:00

SIEMENS CERT

SSA-250085 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SINEC NMS

Titel

SSA-250085 V1.1 (Last Update: 2022-10-11): Multiple Vulnerabilities in SINEC NMS

Veröffentlicht

11. Oktober 2022 02:00

URL

https://cert-portal.siemens.com/productcert/pdf/ssa-250085.pdf

Text

SINEC NMS contains multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released an update for SINEC NMS to fix CVE-2022-24281 and recommends to update to the latest version. Siemens is preparing further ...

Donnerstag, 06.10.2022

19:08

US CERT

AA22-279A: Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

Titel

AA22-279A: Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors

Veröffentlicht

6. Oktober 2022 19:08

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-279a

Text

Original release date: October 6, 2022SummaryThis joint Cybersecurity Advisory (CSA) provides the top Common Vulnerabilities and Exposures (CVEs) used since 2020 by People’s Republic of China (PRC) state-sponsored cyber actors as assessed by the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and Federal Bureau of Investigation (FBI). ...

16:10

US CERT (ICS)

Rockwell Automation FactoryTalk VantagePoint

Titel

Rockwell Automation FactoryTalk VantagePoint

Veröffentlicht

6. Oktober 2022 16:10

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-279-01

Text

16:00

US CERT (ICS)

HIWIN Robot System Software (HRSS)

Titel

HIWIN Robot System Software (HRSS)

Veröffentlicht

6. Oktober 2022 16:00

URL

https://us-cert.cisa.gov/ics/advisories/icsa-22-279-02

Text

Dienstag, 04.10.2022

19:58

US CERT

AA22-277A: Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

Titel

AA22-277A: Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

Veröffentlicht

4. Oktober 2022 19:58

URL

https://us-cert.cisa.gov/ncas/alerts/aa22-277a

Text

Original release date: October 4, 2022SummaryActions to Help Protect Against Russian State-Sponsored Malicious Cyber Activity: • Enforce multifactor authentication (MFA) on all user accounts. • Implement network segmentation to separate network segments based on role and functionality. • Update software, including operating systems, applications, and firmware, on network assets. • ...

16:20

US CERT (ICS)

BD Totalys MultiProcessor

Titel

BD Totalys MultiProcessor

Veröffentlicht

4. Oktober 2022 16:20

URL

https://us-cert.cisa.gov/ics/advisories/icsma-22-277-01

Text

16:15

US CERT (ICS)