Skoči na vsebino
Varnostna obvestila /

SI-CERT 2022-03 / Več ranljivosti v produktih podjetja Siemens

Povzetek

Podjetje Siemens, eden vodilnih proizvajalcev na področju sistemske avtomatizacije v proizvodnji, je 12. 07. 2022 objavil 19 novih ter posodobil 15 varnostnih obvestil o ranljivosti v njihovih produktih. Kar 11 obvestil je označenih z oceno CVSS, ki je večja ali enaka 8. S pomočjo zlorabe ranljivosti lahko napadalci izvajajo napade onemogočanja (DoS), pridobijo dostop do zaupnih podatkov, izkoristijo ranljivosti dviga pravic (privilege escalation) ali pa sprožijo izvajanje kode na daljavo (RCE).

Uporabnikom svetujemo, da sledijo navodilom proizvajalca ter izvedejo potrebne ukrepe.

Ranljivosti

OznakaCVSSOpis varnostnega obvestila
SSB-439005Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
SSA-4337824.9Improper Access Control Vulnerability in Mendix
SSA-4464485.3Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack
SSA-4145135.3Information Disclosure Vulnerability in Mendix
SSA-5578045.4Mirror Port Isolation Vulnerability in SCALANCE X Switches
SSA-2255786.3Improper Access Control in SICAM GridEdge
SSA-6107686.5XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module
SSA-4921736.5Expression Injection Vulnerability in Mendix Applications
SSA-2857956.5Denial of Service in OPC-UA in Industrial Products
SSA-5995067.2Command Injection in RUGGEDCOM ROX
SSA-2449697.4OpenSSL Vulnerability in Industrial Products
SSA-8381217.5Multiple Denial of Service Vulnerabilities in Industrial Products
SSA-7129297.5Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products
SSA-7118297.5Denial of Service Vulnerability in TIA Administrator
SSA-4916217.5Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices
SSA-3212927.5Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products
SSA-3095717.5IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)
SSA-8297387.8Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go
SSA-6789837.8Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)
SSA-4742317.8File Parsing Vulnerability in Simcenter Femap before V2022.2
SSA-4391487.8File Parsing Vulnerabilities in PADS Standard/Plus Viewer
SSA-4292047.8Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization
SSA-2433177.8File Parsing Vulnerability in Simcenter Femap and Parasolid
SSA-8408008Code Injection Vulnerability in RUGGEDCOM ROS
SSA-3486628Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3
SSA-3066548.4Insyde BIOS Vulnerabilities in Siemens Industrial Products
SSA-8653338.6Memory Corruption Vulnerability in EN100 Ethernet Module
SSA-9449529.6Authentication Bypass Vulnerability in Opcenter Quality
SSA-3100389.6Multiple Vulnerabilities in SCALANCE X Switch Devices
SSA-9108839.8DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives
SSA-8401889.9Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
SSA-2205899.9Hard Coded Default Credential Vulnerability in Teamcenter
SSA-58012510Multiple Vulnerabilities in SIMATIC eaSie Core Package
SSA-51737710Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices

Več informacij je na voljo na spletni strani Siemens ProductCERT: https://www.siemens.com/cert/advisories/

Preberite tudi

Varnostna obvestila /

SI-CERT 2024-07 / Ranljivost OpenPrinting CUPS sistema v GNU/Linux

Veriga ranljivosti v sistemu OpenPrinting CUPS napadalcu omogoča, da ob določenih pogojih izvede poljubno programsko kodo na ranljivem sistemu s pravicami uporabnika 'lp'
Več
Varnostna obvestila /

SI-CERT 2024-06 / Kritična ranljivost GeoServer (CVE-2024-36401)

Strežnik GeoServer vsebuje kritično ranljivost, ki omogoča izvajanje programske kode na daljavo. Ranljivost se že izrablja v omrežnih napadih.
Več
Varnostna obvestila /

SI-CERT 2024-05 / Ranljivost Check Point Remote Access VPN

Omrežni varnostni prehodi Check Point, ki imajo omogočen oddaljeni dostop VPN ali uporabljajo Check Point Mobile Secure Workspace with Capsule, so ranljivi na preskakovanje poti, ki omogoča branje poljubnih datotek z datotečnega sistema.
Več