Firma Siemens informuje o nowych podatnościach w swoich produktach oraz aktualizuje starsze biuletyny (P23-003)

cert.pse-online.pl 1 rok temu

14 marca 2023 r. firma Siemens opublikowała Poradniki Bezpieczeństwa dotyczące luk w zabezpieczeniach wielu produktów.

ID	CVSS	Opis/Link
SSA-941426	9.8	Multiple LLDP Vulnerabilities in Industrial Products AKTUALIZAJCA
SSA-851884	9.1	Authentication Bypass Vulnerability in Mendix SAML Module
SSA-847261	7.8	Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation AKTUALIZAJCA
SSA-840800	8.0	Code Injection Vulnerability in RUGGEDCOM ROS AKTUALIZAJCA
SSA-787941	5.3	Denial of Service Vulnerability in RUGGEDCOM ROS V4 AKTUALIZAJCA
SSA-772220	5.9	OpenSSL Vulnerabilities in Industrial Products AKTUALIZAJCA
SSA-764417	6.7	Weak Encryption Vulnerability in RUGGEDCOM ROS Devices AKTUALIZAJCA
SSA-726834	7.5	Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 Devices
SSA-712929	7.5	Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products AKTUALIZAJCA
SSA-700053	7.8	Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go AKTUALIZAJCA
SSA-697140	8.6	Denial of Service Vulnerability in the TCP Event Service of SCALANCE and RUGGEDCOM Products AKTUALIZAJCA
SSA-565386	8.1	Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0
SSA-552702	8.8	Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products AKTUALIZAJCA
SSA-539476	7.5	Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan AKTUALIZAJCA
SSA-517377	10	Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices AKTUALIZAJCA
SSA-491245	7.8	Multiple File Parsing Vulnerabilities in Solid Edge AKTUALIZAJCA
SSA-482757	4.6	Missing Immutable Root of Trust in S7-1500 CPU devices AKTUALIZAJCA
SSA-476715	8.2	Two Vulnerabilities in Automation License Manager AKTUALIZAJCA
SSB-439005	n/a	Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP AKTUALIZAJCA
SSA-419740	9.8	Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
SSA-413565	7.6	Multiple Vulnerabilities in SCALANCE Products AKTUALIZAJCA
SSA-324955	7.4	SAD DNS Attack in Linux Based Products AKTUALIZAJCA
SSA-321292	7.5	Denial of Service in the OPC Foundation Local Discovery Server (LDS) in Industrial Products AKTUALIZAJCA
SSA-320629	8.8	Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3
SSA-260625	6.6	Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2
SSA-256353	9.6	Third-Party Component Vulnerabilities in RUGGEDCOM ROS AKTUALIZAJCA
SSA-250085	7.3	Multiple Vulnerabilities in SINEC NMS and SINEMA Server AKTUALIZAJCA
SSA-244969	7.4	OpenSSL Vulnerability in Industrial Products AKTUALIZAJCA
SSA-223771	7.5	SISCO Stack Vulnerability in SIPROTEC 5 Devices AKTUALIZAJCA
SSA-203374	7.4	Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices