Bulletins | CERT@VDE

Rapid Software LLC Rapid SCADA

Title

Rapid Software LLC Rapid SCADA

Published

Jan. 11, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely, low attack complexity Vendor: Rapid Software LLC Equipment: Rapid SCADA Vulnerabilities: Path Traversal, Relative Path Traversal, Local Privilege Escalation through Incorrect Permission Assignment for Critical Resource, Open Redirect, Use of Hard-coded Credentials, Plaintext Storage of a Password, Generation of ...

11.01.2024

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-10

Siemens SIMATIC

Title

Siemens SIMATIC

Published

Jan. 11, 2024, 1 p.m.

URL

Summary

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

11.01.2024

Schneider Electric Easergy Studio

Title

Schneider Electric Easergy Studio

Published

Jan. 11, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Schneider Electric Equipment: Easergy Studio Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain full control of a workstation. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following ...

04.01.2024

Rockwell Automation FactoryTalk Activation

Title

Rockwell Automation FactoryTalk Activation

Published

Jan. 4, 2024, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-24-004-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Activation Manager Vulnerabilities: Out-of-Bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in a buffer overflow and allow the attacker to gain full access to the system. 3. TECHNICAL ...

December 2023

21.12.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-02

QNAP VioStor NVR

Title

QNAP VioStor NVR

Published

Dec. 21, 2023, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: QNAP Equipment: VioStor NVR Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings. 3. TECHNICAL ...

21.12.2023

https://www.cisa.gov/news-events/ics-advisories/icsa-23-355-01

FXC AE1021/AE1021PE

Title

FXC AE1021/AE1021PE

Published

Dec. 21, 2023, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available/known public exploitation Vendor: FXC Equipment: AE1021, AE1021PE Vulnerability: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution on the device via NTP server ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-03

EFACEC UC 500E

Title

EFACEC UC 500E

Published

Dec. 19, 2023, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: EFACEC Equipment: UC 500 Vulnerabilities: Cleartext Transmission of Sensitive Information, Open Redirect, Exposure of Sensitive Information to an Unauthorized Actor, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to ...

Subnet Solutions Inc. PowerSYSTEM Center

Title

Subnet Solutions Inc. PowerSYSTEM Center

Published

Dec. 19, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Subnet Solutions Inc. Equipment: PowerSYSTEM Center Vulnerability: Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker achieving arbitrary code execution and privilege escalation through the unquoted service path. ...

Open Design Alliance Drawing SDK

Title

Open Design Alliance Drawing SDK

Published

Dec. 19, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-04

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Open Design Alliance (ODA) Equipment: Drawing SDK Vulnerabilities: Use after Free, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to disclose sensitive information on affected installations of ODA Drawing SDK. ...

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-02

EFACEC BCU 500

Title

EFACEC BCU 500

Published

Dec. 19, 2023, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: EFACEC Equipment: BCU 500 Vulnerabilities: Uncontrolled Resource Consumption, Cross-site Request Forgery 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition on the affected product or compromise the web ...

EuroTel ETL3100 Radio Transmitter

Title

EuroTel ETL3100 Radio Transmitter

Published

Dec. 19, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-353-05

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: EuroTel Equipment: ETL3100 Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Authorization Bypass Through User-Controlled Key, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to gain ...

Siemens Web Server of Industrial Products

Title

Siemens Web Server of Industrial Products

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-08

Summary

Siemens RUGGEDCOM and SCALANCE M-800/S615 Family

Title

Siemens RUGGEDCOM and SCALANCE M-800/S615 Family

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-14

Summary

Siemens User Management Component (UMC)

Title

Siemens User Management Component (UMC)

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-03

Summary

Johnson Controls Kantech Gen1 ioSmart

Title

Johnson Controls Kantech Gen1 ioSmart

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from adjacent network Vendor: Sensormatic Electronics, LLC, an affiliate of Johnson Controls Inc. Equipment: Kantech Gen1 ioSmart card reader Vulnerability: Missing Release of Memory after Effective Lifetime 2. RISK EVALUATION An attacker with physical access to the Kantech Gen1 ioSmart ...

Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

Title

Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-13

Summary

Siemens SIMATIC and SIPLUS Products

Title

Siemens SIMATIC and SIPLUS Products

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-05

Summary

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Title

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

Summary

Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

Title

Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

Published

Dec. 14, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-06

Summary

https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-05

ControlbyWeb Relay

Title

ControlbyWeb Relay

Published

Dec. 7, 2023, 1 p.m.

URL

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: ControlByWeb Equipment: X-332 and X-301 Vulnerability: Cross-Site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated attacker to run malicious code during a user's session. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The ...

Schweitzer Engineering Laboratories SEL-411L

Title

Schweitzer Engineering Laboratories SEL-411L

Published

Dec. 7, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-02

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 4.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schweitzer Engineering Laboratories Equipment: SEL-411L Vulnerability: Improper Restriction of Rendered UI Layers or Frames 2. RISK EVALUATION Successful exploitation of this vulnerability could expose authorized users to clickjacking attacks. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The ...

Sierra Wireless AirLink with ALEOS firmware

Title

Sierra Wireless AirLink with ALEOS firmware

Published

Dec. 7, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-06

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sierra Wireless Equipment: AirLink Vulnerabilities: Infinite Loop, NULL Pointer Dereference, Cross-site Scripting, Reachable Assertion, Use of Hard-coded Credentials, Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to ...

Johnson Controls Metasys and Facility Explorer

Title

Johnson Controls Metasys and Facility Explorer

Published

Dec. 7, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-03

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys and Facility Explorer Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service by sending invalid credentials. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

05.12.2023

Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d

Title

Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d

Published

Dec. 5, 2023, 1 p.m.

URL

https://www.cisa.gov/news-events/ics-advisories/icsa-23-339-01

Summary

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable with adjacent access/low attack complexity Vendor: Zebra Technologies Equipment: ZTC Industrial ZT410, ZTC Desktop GK420d Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send specially crafted ...

November 2023

30.11.2023