• 1 (current)
  • 2
  • 3
Tuesday, 16.08.2022
Title
AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
Published
Aug. 16, 2022, 5:38 p.m.
Summary
Original release date: August 16, 2022SummaryActions for ZCS administrators to take today to mitigate malicious cyber activity: • Patch all systems and prioritize patching known exploited vulnerabilities. • Deploy detection signatures and hunt for indicators of compromise (IOCs). • If ZCS was compromised, remediate malicious activity. The Cybersecurity and Infrastructure ...
Title
Yokogawa CENTUM Controller FCS
Published
Aug. 16, 2022, 4:35 p.m.
Summary
This advisory contains mitigations for a Denial of Service vulnerability in CENTUM Controller FCS products.
Title
LS ELECTRIC PLC and XG5000
Published
Aug. 16, 2022, 4:30 p.m.
Summary
This advisory contains mitigations for an Inadequate Encryption Strength vulnerability in LS ELECTRIC PLC and XG5000, a PLC programming software.
Title
Softing Secure Integration Server
Published
Aug. 16, 2022, 4:25 p.m.
Summary
This advisory contains mitigations for Out-of-bounds Read, Uncontrolled Search Path Element, Improper Authentication, Relative Path Traversal, Cleartext Transmission of Sensitive Information, NULL Pointer Dereference, and Integer Underflow vulnerabilities in various Softing products.
Title
Delta Industrial Automation DRAS
Published
Aug. 16, 2022, 4:25 p.m.
Summary
This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Delta Industrial Automation DRAS, a controller software suite.
Title
B&R Industrial Automation Automation Studio 4
Published
Aug. 16, 2022, 4:15 p.m.
Summary
This advisory contains mitigations for an Unrestricted Upload of File with Dangerous Type vulnerability in Industrial Automation Automation Studio 4, a PLC automation programming software.
Title
Emerson Proficy Machine Edition
Published
Aug. 16, 2022, 4:10 p.m.
Summary
This advisory contains mitigations for Missing Support for Integrity Check, Improper Access Control, Unrestricted Upload of File with Dangerous Type, Improper Verification of Cryptographic Signature, Insufficient Verification of Data Authenticity, and Path Traversal: ‘\..\filename’ vulnerabilities in Emerson Proficy Machine Edition, an engineering workstation.
Title
Sequi PortBloque S
Published
Aug. 16, 2022, 4:05 p.m.
Summary
This advisory contains mitigations for Improper Authentication and Improper Authorization vulnerabilities in Sequi PortBloque S, a serial Modbus firewall.
Title
Siemens Industrial Products with OPC UA (Update B)
Published
Aug. 16, 2022, 4 p.m.
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-22-132-08 Siemens Industrial Products with OPC UA (Update A) that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for various Siemens Industrial Products with OPC UA products.
Thursday, 11.08.2022
Title
AA22-223A: #StopRansomware: Zeppelin Ransomware
Published
Aug. 11, 2022, 6 p.m.
Summary
Original release date: August 11, 2022SummaryActions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enable and enforce multifactor authentication. Note: this joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to ...
Title
Siemens Simcenter STAR-CCM+
Published
Aug. 11, 2022, 4:54 p.m.
Summary
This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in versions of Siemens Simcenter STAR-CCM+ products.
Title
Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70
Published
Aug. 11, 2022, 4:50 p.m.
Summary
This advisory contains mitigations for Heap-based Buffer Overflow, Wrap or Wraparound, Classic Buffer Overflow, and Out-of-bounds Write vulnerabilities in products using AT&T Labs Compressor (XMill) and Decompressor (XDemill).
Title
Emerson ROC800, ROC800L and DL8000
Published
Aug. 11, 2022, 4:48 p.m.
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerability in versions of ROC800, a remote automation controller.
Title
Siemens SICAM A8000 Web Server Module
Published
Aug. 11, 2022, 4:46 p.m.
Summary
This advisory contains mitigations for an Improper Access Control vulnerability in versions of SICAM A8000 Web Server Module products.
Title
Siemens SICAM TOOLBOX II
Published
Aug. 11, 2022, 4:44 p.m.
Summary
This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in versions of SICAM TOOLBOX II, a control and monitoring system.
Title
Siemens SIMATIC S7-400 (Update A)
Published
Aug. 11, 2022, 4:40 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-104-12 Siemens SIMATIC S7-400 that was published April 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens SIMATIC S7-400.
Title
Siemens Industrial Products Intel CPUs (Update E)
Published
Aug. 11, 2022, 4:38 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-222-05 Siemens Industrial Products Intel CPU (Update D) that was published July 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for a Missing Encryption of Sensitive Data vulnerability in versions of Siemens Industrial Products Intel ...
Title
Siemens Industrial Products LLDP (Update C)
Published
Aug. 11, 2022, 4:36 p.m.
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update B) that was published August 10, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Classic Buffer Overflow and Uncontrolled Resource Consumption vulnerabilities in versions of Siemens Industrial Products (LLDP).
Title
SafeLogic Designer vulnerabilities
Published
Aug. 11, 2022, 2 a.m.
Summary

BOSCH-SA-463993: The SafeLogic Designer from Bosch Rexroth contains technology from SICK AG. The manufacturer has published a security bulletin regarding a vulnerability in the .NET framework. \[1\]A vulnerability in a .NET framework class used by SafeLogic Designer allows an attacker to craft malicious project files. Opening/importing such a malicious project ...

Tuesday, 09.08.2022
Title
Mitsubishi Electric GT SoftGOT2000
Published
Aug. 9, 2022, 4:15 p.m.
Summary
This advisory contains mitigations for Infinite Loop and OS Command Injection vulnerabilities in versions of Mitsubishi Electric GT SoftGOT2000 software.
Title
Emerson ControlWave
Published
Aug. 9, 2022, 4:10 p.m.
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerabilities in Emerson ControlWave products, a programmable controller.
Title
Emerson OpenBSI
Published
Aug. 9, 2022, 4:05 p.m.
Summary
This advisory contains mitigations for Use of Broken or Risky Cryptographic Algorithm and Use of Hard-coded Cryptographic Key vulnerabilities in Emerson OpenBSI, a set of network communication services.
Title
SSA-772220 V2.1 (Last Update: 2022-08-09): OpenSSL Vulnerabilities in Industrial Products
Published
Aug. 9, 2022, 2 a.m.
Summary
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent . Siemens has released updates for several affected products and recommends to update to the latest ...
Title
SSA-306654 V1.3 (Last Update: 2022-08-09): Insyde BIOS Vulnerabilities in Siemens Industrial Products
Published
Aug. 9, 2022, 2 a.m.
Summary
Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available.
Title
SSA-539476 V1.3 (Last Update: 2022-08-09): Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan
Published
Aug. 9, 2022, 2 a.m.
Summary
Vulnerabilities in the third-party component strongSwan could allow an attacker to cause a denial of service (DoS) condition in affected devices by exploiting integer overflow bugs. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends countermeasures ...
  • 1 (current)
  • 2
  • 3

Last Updates

BOSCH PSIRT
11.08.2022
CODESYS
27.07.2022
SIEMENS CERT
09.08.2022
US CERT
16.08.2022
US CERT (ICS)
16.08.2022

By Source

Archive

2022
2021
2020
2019
2018
2017

Feeds