August 2022
Title
Yokogawa CENTUM Controller FCS
Published
Aug. 16, 2022, 4:35 p.m.
Summary
This advisory contains mitigations for a Denial of Service vulnerability in CENTUM Controller FCS products.
Title
LS ELECTRIC PLC and XG5000
Published
Aug. 16, 2022, 4:30 p.m.
Summary
This advisory contains mitigations for an Inadequate Encryption Strength vulnerability in LS ELECTRIC PLC and XG5000, a PLC programming software.
Title
Softing Secure Integration Server
Published
Aug. 16, 2022, 4:25 p.m.
Summary
This advisory contains mitigations for Out-of-bounds Read, Uncontrolled Search Path Element, Improper Authentication, Relative Path Traversal, Cleartext Transmission of Sensitive Information, NULL Pointer Dereference, and Integer Underflow vulnerabilities in various Softing products.
Title
Delta Industrial Automation DRAS
Published
Aug. 16, 2022, 4:25 p.m.
Summary
This advisory contains mitigations for an Improper Restriction of XML External Entity Reference vulnerability in Delta Industrial Automation DRAS, a controller software suite.
Title
B&R Industrial Automation Automation Studio 4
Published
Aug. 16, 2022, 4:15 p.m.
Summary
This advisory contains mitigations for an Unrestricted Upload of File with Dangerous Type vulnerability in Industrial Automation Automation Studio 4, a PLC automation programming software.
Title
Emerson Proficy Machine Edition
Published
Aug. 16, 2022, 4:10 p.m.
Summary
This advisory contains mitigations for Missing Support for Integrity Check, Improper Access Control, Unrestricted Upload of File with Dangerous Type, Improper Verification of Cryptographic Signature, Insufficient Verification of Data Authenticity, and Path Traversal: ‘\..\filename’ vulnerabilities in Emerson Proficy Machine Edition, an engineering workstation.
Title
Sequi PortBloque S
Published
Aug. 16, 2022, 4:05 p.m.
Summary
This advisory contains mitigations for Improper Authentication and Improper Authorization vulnerabilities in Sequi PortBloque S, a serial Modbus firewall.
Title
Siemens Industrial Products with OPC UA (Update B)
Published
Aug. 16, 2022, 4 p.m.
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-22-132-08 Siemens Industrial Products with OPC UA (Update A) that was published May 12, 2022, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for various Siemens Industrial Products with OPC UA products.
Title
Siemens Simcenter STAR-CCM+
Published
Aug. 11, 2022, 4:54 p.m.
Summary
This advisory contains mitigations for an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in versions of Siemens Simcenter STAR-CCM+ products.
Title
Schneider Electric EcoStruxure, EcoStruxure Process Expert, SCADAPack RemoteConnect for x70
Published
Aug. 11, 2022, 4:50 p.m.
Summary
This advisory contains mitigations for Heap-based Buffer Overflow, Wrap or Wraparound, Classic Buffer Overflow, and Out-of-bounds Write vulnerabilities in products using AT&T Labs Compressor (XMill) and Decompressor (XDemill).
Title
Emerson ROC800, ROC800L and DL8000
Published
Aug. 11, 2022, 4:48 p.m.
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerability in versions of ROC800, a remote automation controller.
Title
Siemens SICAM A8000 Web Server Module
Published
Aug. 11, 2022, 4:46 p.m.
Summary
This advisory contains mitigations for an Improper Access Control vulnerability in versions of SICAM A8000 Web Server Module products.
Title
Siemens SICAM TOOLBOX II
Published
Aug. 11, 2022, 4:44 p.m.
Summary
This advisory contains mitigations for a Use of Hard-coded Credentials vulnerability in versions of SICAM TOOLBOX II, a control and monitoring system.
Title
Siemens SIMATIC S7-400 (Update A)
Published
Aug. 11, 2022, 4:40 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-104-12 Siemens SIMATIC S7-400 that was published April 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for an Uncontrolled Resource Consumption vulnerability in the Siemens SIMATIC S7-400.
Title
Siemens Industrial Products Intel CPUs (Update E)
Published
Aug. 11, 2022, 4:38 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-222-05 Siemens Industrial Products Intel CPU (Update D) that was published July 14, 2022, to the ICS webpage on www.cisa.gov/ics. This advisory contains mitigations for a Missing Encryption of Sensitive Data vulnerability in versions of Siemens Industrial Products Intel ...
Title
Siemens Industrial Products LLDP (Update C)
Published
Aug. 11, 2022, 4:36 p.m.
Summary
This updated advisory is a follow-up to the original advisory titled ICSA-21-194-07 Siemens Industrial Products LLDP (Update B) that was published August 10, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Classic Buffer Overflow and Uncontrolled Resource Consumption vulnerabilities in versions of Siemens Industrial Products (LLDP).
Title
Mitsubishi Electric GT SoftGOT2000
Published
Aug. 9, 2022, 4:15 p.m.
Summary
This advisory contains mitigations for Infinite Loop and OS Command Injection vulnerabilities in versions of Mitsubishi Electric GT SoftGOT2000 software.
Title
Emerson ControlWave
Published
Aug. 9, 2022, 4:10 p.m.
Summary
This advisory contains mitigations for an Insufficient Verification of Data Authenticity vulnerabilities in Emerson ControlWave products, a programmable controller.
Title
Emerson OpenBSI
Published
Aug. 9, 2022, 4:05 p.m.
Summary
This advisory contains mitigations for Use of Broken or Risky Cryptographic Algorithm and Use of Hard-coded Cryptographic Key vulnerabilities in Emerson OpenBSI, a set of network communication services.
Title
Digi ConnectPort X2D
Published
Aug. 4, 2022, 4:05 p.m.
Summary
This advisory contains mitigations for an Execution with Unnecessary Privileges vulnerability in Digi ConnectPort X2D, a connection gateway.
Title
Delta Electronics DIAEnergie (Update C)
Published
Aug. 2, 2022, 4:20 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-238-03 Delta Electronics DIAEnergie (Update B) that was published March 22, 2022, on the ICS webpage at www.cisa.gov/ics. This advisory contains mitigations for Use of Password Hash with Insufficient Computational Effort, Authentication Bypass Using an Alternate Path or Channel, ...
Title
Mitsubishi Electric FA Engineering Software Products (Update F)
Published
Aug. 2, 2022, 4:10 p.m.
Summary
his updated advisory is a follow-up to the advisory update titled ICSA-21-049-02 Mitsubishi Electric FA Engineering Software Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Heap-based Buffer Overflow and Improper Handling of Length Parameter Inconsistency vulnerabilities in various ...
Title
Mitsubishi Electric Factory Automation Engineering Products (Update H)
Published
Aug. 2, 2022, 4 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-20-212-04 Mitsubishi Electric Factory Automation Engineering Products (Update E) that was published May 24, 2022, to the ICS webpage on cisa.gov/ics. This advisory contains mitigations for an Unquoted Search Path or Element vulnerability in various Mitsubishi Electric Factory Automation ...
July 2022
Title
Rockwell Products Impacted by Chromium Type Confusion
Published
July 28, 2022, 4:10 p.m.
Summary
This advisory contains mitigations for a Type Confusion vulnerability in various Rockwell Automation products.
Title
Mitsubishi Electric FA Engineering Software (Update B)
Published
July 28, 2022, 4:05 p.m.
Summary
This updated advisory is a follow-up to the advisory update titled ICSA-21-350-05 Mitsubishi Electric FA Engineering Software (Update A) that was published December 16, 2021, on the ICS webpage on cisa.gov/ics. This advisory contains mitigations for Out-of-bounds Read and Integer Underflow vulnerabilities in Mitsubishi Electric FA Engineering Software, an engineering ...

Last Updates

BOSCH PSIRT
11.08.2022
CODESYS
27.07.2022
SIEMENS CERT
09.08.2022
US CERT
16.08.2022
US CERT (ICS)
16.08.2022

By Source

Archive

2022
2021
2020
2019
2018
2017

Feeds