Bulletins | CERT@VDE

SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products

Title

SSA-324955 V2.0 (Last Update: 2023-03-14): SAD DNS Attack in Linux Based Products

Published

March 14, 2023, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-324955.html

Summary

A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://www.saddns.net/. Siemens has released updates for the affected products and ...

SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge

Title

SSA-491245 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Solid Edge

Published

March 14, 2023, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-491245.html

Summary

Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP, SLDPRT and PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker ...

SSA-700053 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Title

SSA-700053 V1.1 (Last Update: 2023-03-14): Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

Published

March 14, 2023, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-700053.html

Summary

Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads a malicious file in CGM or RAS format. If a user is tricked to open a malicious file with the affected products, this could lead the application to crash or ...

SSA-565386 V1.0: Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0

Title

SSA-565386 V1.0: Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0

Published

March 14, 2023, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-565386.html

Summary

Multiple vulnerabilities affecting various third-party components of SCALANCE W-700 IEEE 802.11ax devices before V2.0 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released an update for SCALANCE W-700 IEEE 802.11ax and recommends to update to the latest ...

SSA-851884 V1.0: Authentication Bypass Vulnerability in Mendix SAML Module

Title

SSA-851884 V1.0: Authentication Bypass Vulnerability in Mendix SAML Module

Published

March 14, 2023, 1 a.m.

URL

https://cert-portal.siemens.com/productcert/html/ssa-851884.html

Summary

The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.

13.03.2023

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a

Threat Actors Exploit Progress Telerik Vulnerability in...

Title

<a href="/news-events/cybersecurity-advisories/aa23-074a" hreflang="en">Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server</a>

Published

March 13, 2023, 6:57 p.m.

URL

Summary

SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) and authoring organizations identified the presence of indicators of compromise (IOCs) at a federal civilian executive branch (FCEB) agency. Analysts determined that multiple cyber threat actors, including an APT actor, were able to exploit a ...

13.03.2023

Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server

Title

Threat Actors Exploit Progress Telerik Vulnerability in U.S. Government IIS Server

Published

March 13, 2023, 6:57 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-074a

Summary

Sicherheitsupdate: CODESYS Security Advisories 2023-01 bis 2023-03

CODESYS

Title

Sicherheitsupdate: CODESYS Security Advisories 2023-01 bis 2023-03

Published

March 9, 2023, 3:06 p.m.

URL

https://feedpress.me/link/15744/16012721/sicherheitsupdate-codesys-security-advisories-2023-01-bis-2023-03.html

Summary

Please check source url for more information.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-04

Step Tools Third-Party

Title

<a href="/news-events/ics-advisories/icsa-23-068-04" hreflang="en">Step Tools Third-Party</a>

Published

March 9, 2023, 1 p.m.

URL

Summary

1. EXECUTIVE SUMMARY CVSS v3 2.2 ATTENTION: Low attack complexity Vendor: Step Tools, Inc Equipment: STEPTools ifcmesh library Vulnerability: Null Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a specially constructed file. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-01

Akuvox E11

Title

<a href="/news-events/ics-advisories/icsa-23-068-01" hreflang="en">Akuvox E11</a>

Published

March 9, 2023, 1 p.m.

URL

Summary

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Akuvox Equipment: E11 Vulnerabilities: Generation of Predictable IV with CBC, User of Hard-coded Cryptographic Key, Missing Authentication for Critical Function, Storing Passwords in a Recoverable Format, Weak Password Recovery Mechanism for Forgotten Password, Command Injection, Reliance on File ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-05

Hitachi Energy Relion 670, 650 and SAM600-IO Series

Title

<a href="/news-events/ics-advisories/icsa-23-068-05" hreflang="en">Hitachi Energy Relion 670, 650 and SAM600-IO Series</a>

Published

March 9, 2023, 1 p.m.

URL

Summary

1. EXECUTIVE SUMMARY CVSS v3 4.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670, 650, and SAM600-IO Series Vulnerability: Insufficient Verification of Data Authenticity 2. RISK EVALUATION Successful exploitation of this vulnerability could cause the Intelligent Electronic Device (IED) to restart, causing a temporary denial-of-service condition. 3. ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-02

B&R Systems Diagnostics Manager

Title

<a href="/news-events/ics-advisories/icsa-23-068-02" hreflang="en">B&R Systems Diagnostics Manager</a>

Published

March 9, 2023, 1 p.m.

URL

Summary

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: B&R Industrial Automation Equipment: Systems Diagnostics Manager (SDM) Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code to exfiltrate data and perform any action within ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-068-03

ABB Ability Symphony Plus

Title

<a href="/news-events/ics-advisories/icsa-23-068-03" hreflang="en">ABB Ability Symphony Plus</a>

Published

March 9, 2023, 1 p.m.

URL

Summary

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: ABB Equipment: Ability Symphony Plus Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthorized client to connect to the S+ Operations servers (human machine interface (HMI) network), to act as a legitimate S+ ...

02.03.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-03

Rittal CMC III Access systems

Title

<a href="/news-events/ics-advisories/icsa-23-061-03" hreflang="en">Rittal CMC III Access systems</a>

Published

March 2, 2023, 1 p.m.

URL

Summary

02.03.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-01

Mitsubishi Electric MELSEC iQ-F Series

Title

<a href="/news-events/ics-advisories/icsa-23-061-01" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series</a>

Published

March 2, 2023, 1 p.m.

URL

Summary

02.03.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-061-02

Baicells Nova

Title

<a href="/news-events/ics-advisories/icsa-23-061-02" hreflang="en">Baicells Nova</a>

Published

March 2, 2023, 1 p.m.

URL

Summary

February 2023

28.02.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-02

Hitachi Energy Gateway Station

Title

<a href="/news-events/ics-advisories/icsa-23-059-02" hreflang="en">Hitachi Energy Gateway Station</a>

Published

Feb. 28, 2023, 1 p.m.

URL

Summary

28.02.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-059-01

Hitachi Energy Gateway Station

Title

<a href="/news-events/ics-advisories/icsa-23-059-01" hreflang="en">Hitachi Energy Gateway Station</a>

Published

Feb. 28, 2023, 1 p.m.

URL

Summary

28.02.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-22-139-01-0

Mitsubishi Electric MELSEC iQ-F Series (Update B)

Title

<a href="/news-events/ics-advisories/icsa-22-139-01-0" hreflang="en">Mitsubishi Electric MELSEC iQ-F Series (Update B)</a>

Published

Feb. 28, 2023, 1 p.m.

URL

Summary

CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks

Title

CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks

Published

Feb. 24, 2023, 8:04 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a

Summary

SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this Cybersecurity Advisory (CSA) detailing activity and key findings from a recent CISA red team assessment—in coordination with the assessed organization—to provide network defenders recommendations for improving their organization's cyber posture. Actions to take today to harden your local environment: ...

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a

CISA Red Team Shares Key Findings to Improve Monitoring...

Title

<a href="/news-events/cybersecurity-advisories/aa23-059a" hreflang="en">CISA Red Team Shares Key Findings to Improve Monitoring and Hardening of Networks</a>

Published

Feb. 24, 2023, 8:04 p.m.

URL

Summary

#StopRansomware: Royal Ransomware

Title

#StopRansomware: Royal Ransomware

Published

Feb. 24, 2023, 6:30 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a

Summary

SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-061a

#StopRansomware: Royal Ransomware

Title

<a href="/news-events/cybersecurity-advisories/aa23-061a" hreflang="en">#StopRansomware: Royal Ransomware</a>

Published

Feb. 24, 2023, 6:30 p.m.

URL

Summary

23.02.2023