• 1
  • 2 (current)
Tuesday, 08.09.2020
02:00
SIEMENS CERT
SSA-568969 (Last Update: 2020-09-08): Insecure Storage of Sensitive Information in Spectrum Power™ 4
Title
SSA-568969 (Last Update: 2020-09-08): Insecure Storage of Sensitive Information in Spectrum Power™ 4
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-568969.pdf
Summary
Vulnerabilities in Spectrum Power™ 4 could allow an unauthorized attacker to retrieve a list of software users, or in certain cases to list the contents of a directory. Siemens has released updates and configuration recommendations for Spectrum Power™ 4 in order to mitigate the issues.
02:00
SIEMENS CERT
SSA-709003 (Last Update: 2020-09-08): Privilege Escalation Vulnerability in License Management Utility (LMU)
Title
SSA-709003 (Last Update: 2020-09-08): Privilege Escalation Vulnerability in License Management Utility (LMU)
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-709003.pdf
Summary
The latest update for the License Management Utility (LMU), which is used by multiple Siemens building technology products, fixes a vulnerability that could allow local users to escalate privileges and execute code as local SYSTEM user. Siemens has released an update version of LMU, recommends to install this update on ...
02:00
SIEMENS CERT
SSA-770698 (Last Update: 2020-09-08): User Information Disclosure Vulnerability in Siveillance Video Client
Title
SSA-770698 (Last Update: 2020-09-08): User Information Disclosure Vulnerability in Siveillance Video Client
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-770698.pdf
Summary
The Siveillance Video Client contains an information disclosure vulnerability that could allow an attacker to obtain valid adminstrator login names and use this information to launch further attacks. Siemens recommends specific countermeasures and provides patches for released versions of the Siveillance Video Client.
02:00
SIEMENS CERT
SSA-102233 (Last Update: 2020-09-08): SegmentSmack in VxWorks-based Industrial Devices
Title
SSA-102233 (Last Update: 2020-09-08): SegmentSmack in VxWorks-based Industrial Devices
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-102233.pdf
Summary
The latest updates for the affected products fix a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens is ...
02:00
SIEMENS CERT
SSA-270778 (Last Update: 2020-09-08): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software
Title
SSA-270778 (Last Update: 2020-09-08): Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-270778.pdf
Summary
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain circumstances (versions prior to SIMATIC WinCC V7.3 or SIMATIC PCS 7 V8.1 are ...
02:00
SIEMENS CERT
SSA-312271 (Last Update: 2020-09-08): Unquoted Search Path Vulnerabilities in Windows-based Industrial Software Applications
Title
SSA-312271 (Last Update: 2020-09-08): Unquoted Search Path Vulnerabilities in Windows-based Industrial Software Applications
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-312271.pdf
Summary
The latest update for affected products fix local privilege escalation vulnerabilities that could allow authorized local users with administrative privileges to execute custom code with SYSTEM level privileges. Siemens has released updates for some of the affected products, and is working on further updates. For the remaining affected products, Siemens ...
02:00
SIEMENS CERT
SSA-377115 (Last Update: 2020-09-08): SegmentSmack in Linux IP-Stack based Industrial Devices
Title
SSA-377115 (Last Update: 2020-09-08): SegmentSmack in Linux IP-Stack based Industrial Devices
Published
Sept. 8, 2020, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf
Summary
The latest updates for the affected products fix a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has ...
Tuesday, 01.09.2020
14:30
US CERT
AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity
Title
AA20-245A: Technical Approaches to Uncovering and Remediating Malicious Activity
Published
Sept. 1, 2020, 2:30 p.m.
URL
https://us-cert.cisa.gov/ncas/alerts/aa20-245a
Summary
Original release date: September 1, 2020 | Last revised: September 24, 2020SummaryThis joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia,[1] Canada,[2] New Zealand,[3][4] the United Kingdom,[5] and the United States.[6] It highlights technical approaches to uncovering malicious activity and includes ...
  • 1
  • 2 (current)

Last Updates

BOSCH PSIRT
20.03.2024
CODESYS
28.06.2023
SIEMENS CERT
19.04.2024
US CERT
17.04.2024
US CERT (ICS)
18.04.2024

By Source

Archive

2024
2023
2022
2021
2020
2019
2018
2017

Feeds