Firma Siemens informuje o nowych podatnościach w swoich produktach oraz aktualizuje starsze biuletyny (P23-198)

cert.pse-online.pl 9 miesięcy temu

8 sierpnia 2023 r. firma Siemens opublikowała zalecenia dotyczące bezpieczeństwa dotyczące luk w zabezpieczeniach wielu produktów.

SSA-975961	7.8	Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10
SSA-932528	7.8	Multiple File Parsing Vulnerabilities in Solid Edge – Uaktualnienie
SSA-908185	9.1	Mirror Port Isolation Vulnerability in RUGGEDCOM ROS Devices
SSA-851884	9.1	Authentication Bypass Vulnerability in Mendix SAML Module – Uaktualnienie
SSA-811403	7.8	Multiple File Parsing Vulnerabilities in Solid Edge before V223 Uaktualnienie 7
SSA-794697	9.8	Vulnerabilities in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0 – Uaktualnienie
SSA-770902	7.5	Denial of Service Vulnerability in the Web Server of RUGGEDCOM ROS Devices
SSA-764801	7.8	File Parsing Vulnerabilities in Tecnomatix Plant Simulation – Uaktualnienie
SSA-691715	7.8	Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products – Uaktualnienie
SSA-686975	7.9	IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs – Uaktualnienie
SSA-478960	6.5	Missing CSRF Protection in the Web Server Login Page of Industrial Controllers – Uaktualnienie
SSA-472630	9.8	Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4
SSB-439005	n/a	Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP – Uaktualnienie
SSA-407785	7.8	Multiple X_T File Parsing Vulnerabilities in Parasolid and Teamcenter Visualization
SSA-306654	8.4	Insyde BIOS Vulnerabilities in Siemens Industrial Products
SSA-264815	7.4	Type Confusion Vulnerability in OpenSSL X.400 Address Processing in SIMATIC Products
SSA-264814	5.9	Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products
SSA-223771	7.5	SISCO Stack Vulnerability in SIPROTEC 5 Devices – Uaktualnienie
SSA-188491	7.8	DLL Hijacking Vulnerabilities in Siemens Software Center
SSA-180579	8.8	Privilege Management Vulnerability and Multiple Nucleus RTOS Vulnerabilities in APOGEE/TALON Field Panels before V3.5.5/V2.8.20 – Uaktualnienie
SSA-131450	7.8	File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization
SSA-116172	7.8	Nullsoft Scriptable Install System (NSIS) Vulnerability (CVE-2023-37378) in Parasolid Installer
SSA-001569	7.8	JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid