Tuesday, 30.08.2022
16:55
US CERT (ICS)
Hitachi Energy FACTS Control Platform (FCP) Product
Title
Hitachi Energy FACTS Control Platform (FCP) Product
Published
Aug. 30, 2022, 4:55 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-01
Summary
This advisory contains mitigations for Inconsistent Interpretation of HTTP Requests, Use After Free, Classic Buffer Overflow, Integer Underflow, Improper Certificate Validation, Observable Discrepancy vulnerabilities in Hitachi Energy FACTS Control Platform (FCP).
16:50
US CERT (ICS)
Hitachi Energy Gateway Station (GWS) Product
Title
Hitachi Energy Gateway Station (GWS) Product
Published
Aug. 30, 2022, 4:50 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-02
Summary
This advisory contains mitigations for a Hitachi Energy Gateway Station (GWS) Product vulnerability in Inconsistent Interpretation of HTTP Requests, Use After Free, Classic Buffer Overflow, Integer Underflow, Improper Certificate Validation, Observable Discrepancy.
16:40
US CERT (ICS)
Hitachi Energy MSM Product
Title
Hitachi Energy MSM Product
Published
Aug. 30, 2022, 4:40 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-03
Summary
This advisory contains mitigations for a Hitachi Energy MSM Product vulnerability in Reliance on Uncontrolled Component.
16:30
US CERT (ICS)
Fuji Electric D300win
Title
Fuji Electric D300win
Published
Aug. 30, 2022, 4:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-05
Summary
This advisory contains mitigations for a Fuji Electric D300win vulnerability Out-of-bounds Read, Write-what-where Condition
16:30
US CERT (ICS)
Honeywell ControlEdge
Title
Honeywell ControlEdge
Published
Aug. 30, 2022, 4:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-06
Summary
This advisory contains mitigations for a Honeywell ControlEdge vulnerability Missing Authentication for Critical Function.
16:25
US CERT (ICS)
Honeywell Experion LX
Title
Honeywell Experion LX
Published
Aug. 30, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-07
Summary
This advisory contains mitigations for a Missing Authentication for Critical Function vulnerability in versions of the Honeywell equipment, Experion LX, distributed control system (DCS).
16:20
US CERT (ICS)
Honeywell Trend Controls Inter-Controller Protocol
Title
Honeywell Trend Controls Inter-Controller Protocol
Published
Aug. 30, 2022, 4:20 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-08
Summary
This advisory contains mitigations for a Cleartext Transmission of Sensitive Information vulnerability in versions of the Honeywell products, Trend Controls IQ Series IC, an industrial communication controller.
16:10
US CERT (ICS)
PTC Kepware KEPServerEX
Title
PTC Kepware KEPServerEX
Published
Aug. 30, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-242-10
Summary
This advisory contains mitigations for Heap-Based Buffer Overflow and Stack-Based Buffer Overflow vulnerabilities in versions of the PTC product, Kepware KEPServerEX, a connectivity platform.
Tuesday, 23.08.2022
17:06
US CERT (ICS)
Measuresoft ScadaPro Server and Client
Title
Measuresoft ScadaPro Server and Client
Published
Aug. 23, 2022, 5:06 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-235-06
Summary
This advisory contains mitigations for Untrusted Pointer Dereference, Stack-based Buffer Overflow, Use After Free, and Link Following vulnerabilities in Measuresoft ScadaPro Server and Client, a supervisory control and data acquisition (SCADA) system.
17:04
US CERT (ICS)
Measuresoft ScadaPro Server
Title
Measuresoft ScadaPro Server
Published
Aug. 23, 2022, 5:04 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-235-05
Summary
This advisory contains mitigations for an Out-of-bounds Write vulnerability in Measuresoft ScadaPro Server, a supervisory control and data acquisition (SCADA) system.
17:02
US CERT (ICS)
Hitachi Energy RTU500
Title
Hitachi Energy RTU500
Published
Aug. 23, 2022, 5:02 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-235-07
Summary
This advisory contains mitigations for a Stack-based Buffer Overflow vulnerability in versions of Hitatchi Energy RTU500 firmware.
17:00
US CERT (ICS)
Illumina Local Run Manager (Update A)
Title
Illumina Local Run Manager (Update A)
Published
Aug. 23, 2022, 5 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-153-02
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-22-153-02 Illumina Local Run Manager that was published June 22, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Path Traversal, Unrestricted Upload of File with Dangerous Type, Improper Access Control, and Cleartext Transmission of Sensitive ...
16:00
US CERT (ICS)
Delta Industrial Automation DIALink
Title
Delta Industrial Automation DIALink
Published
Aug. 23, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-235-02
Summary
This advisory contains mitigations for an Use of Hard-coded Cryptographic Key vulnerability in various versions of the DIALink Industrial Automation server.
Friday, 19.08.2022
04:20
US CERT (ICS)
Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update A)
Title
Mitsubishi Electric MELSEC iQ-R, Q, L Series and MELIPC Series (Update A)
Published
Aug. 19, 2022, 4:20 a.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-172-01
Summary
This updated advisory is a follow-up to the advisory titled ICSA-22-221-01 Mitsubishi Electric MELSEC Q and L Series that was published June 21, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Improper Resource Locking vulnerability in Mitsubishi Electric MELSEC iQ-R, Q, and L series CPU ...
Thursday, 18.08.2022
16:25
US CERT (ICS)
Mitsubishi Electric Multiple Factory Automation Products (Update A)
Title
Mitsubishi Electric Multiple Factory Automation Products (Update A)
Published
Aug. 18, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-221-01
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-22-221-01 Mitsubishi Electric GT SoftGOT2000 that was published August 9, 2022, to the ICS webpage on cisa.gov/ics.. This advisory contains mitigations for Infinite Loop and OS Command Injection vulnerabilities in versions of Mitsubishi Electric GOT2000 compatible HMI software, CC-Link ...
16:10
US CERT (ICS)
Siemens OpenSSL Affected Industrial Products (Update B)
Title
Siemens OpenSSL Affected Industrial Products (Update B)
Published
Aug. 18, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-167-14
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-22-167-14 Siemens OpenSSL Affected Industrial Products (Update A) that was published July 14, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Infinite Loop vulnerability in the Siemens OpenSSL Affected Industrial Products.
16:05
US CERT (ICS)
Siemens Industrial Products LLDP (Update D)
Title
Siemens Industrial Products LLDP (Update D)
Published
Aug. 18, 2022, 4:05 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-194-07
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update C) that was published August 11, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Classic Buffer Overflow and Uncontrolled Resource Consumption vulnerabilities in versions of Siemens Industrial Products (LLDP).
16:00
US CERT (ICS)
Siemens Linux-based Products (Update J)
Title
Siemens Linux-based Products (Update J)
Published
Aug. 18, 2022, 4 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-03
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-131-03 Siemens Linux-based Products (Update I) that was published August 11, 2022, to the ICS webpage at www.cisa.gov/ics. This advisory contains mitigations for a Use of Insufficiently Random Values vulnerability in versions of Siemens Linux-based products.
Tuesday, 16.08.2022
17:38
US CERT
AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
Title
AA22-228A: Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
Published
Aug. 16, 2022, 5:38 p.m.
URL
https://us-cert.cisa.gov/ncas/alerts/aa22-228a
Summary
Original release date: August 16, 2022SummaryActions for ZCS administrators to take today to mitigate malicious cyber activity: • Patch all systems and prioritize patching known exploited vulnerabilities. • Deploy detection signatures and hunt for indicators of compromise (IOCs). • If ZCS was compromised, remediate malicious activity. The Cybersecurity and Infrastructure ...
16:35
US CERT (ICS)
Yokogawa CENTUM Controller FCS
Title
Yokogawa CENTUM Controller FCS
Published
Aug. 16, 2022, 4:35 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-01
Summary
This advisory contains mitigations for a Denial of Service vulnerability in CENTUM Controller FCS products.
16:30
US CERT (ICS)
LS ELECTRIC PLC and XG5000
Title
LS ELECTRIC PLC and XG5000
Published
Aug. 16, 2022, 4:30 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-02
Summary
This advisory contains mitigations for an Inadequate Encryption Strength vulnerability in LS ELECTRIC PLC and XG5000, a PLC programming software.
16:25
US CERT (ICS)
Softing Secure Integration Server
Title
Softing Secure Integration Server
Published
Aug. 16, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-04
Summary
This advisory contains mitigations for Out-of-bounds Read, Uncontrolled Search Path Element, Improper Authentication, Relative Path Traversal, Cleartext Transmission of Sensitive Information, NULL Pointer Dereference, and Integer Underflow vulnerabilities in various Softing products.
16:25
US CERT (ICS)
Delta Industrial Automation DRAS
Title
Delta Industrial Automation DRAS
Published
Aug. 16, 2022, 4:25 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-03
Summary
This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Delta Industrial Automation DRAS, a controller software suite.
16:15
US CERT (ICS)
B&R Industrial Automation Automation Studio 4
Title
B&R Industrial Automation Automation Studio 4
Published
Aug. 16, 2022, 4:15 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-05
Summary
This advisory contains mitigations for an Unrestricted Upload of File with Dangerous Type vulnerability in Industrial Automation Automation Studio 4, a PLC automation programming software.
16:10
US CERT (ICS)
Emerson Proficy Machine Edition
Title
Emerson Proficy Machine Edition
Published
Aug. 16, 2022, 4:10 p.m.
URL
https://us-cert.cisa.gov/ics/advisories/icsa-22-228-06
Summary
This advisory contains mitigations for Missing Support for Integrity Check, Improper Access Control, Unrestricted Upload of File with Dangerous Type, Improper Verification of Cryptographic Signature, Insufficient Verification of Data Authenticity, and Path Traversal: ‘\..\filename’ vulnerabilities in Emerson Proficy Machine Edition, an engineering workstation.

Last Updates

BOSCH PSIRT
20.03.2024
CODESYS
28.06.2023
SIEMENS CERT
19.04.2024
US CERT
17.04.2024
US CERT (ICS)
18.04.2024

By Source

Archive

2024
2023
2022
2021
2020
2019
2018
2017

Feeds