Firma Siemens informuje o nowych podatnościach w swoich produktach oraz aktualizuje starsze biuletyny (P23-278)

cert.pse-online.pl 1 rok temu

10 października 2023 r. firma Siemens opublikowała porady dotyczące bezpieczeństwa mające na celu usunięcie luk w zabezpieczeniach wielu produktów.

ID	CVSS	Link/Opis
SSA-843070	9.8	Multiple Vulnerabilities in SCALANCE W1750D
SSA-829656	7.8	Stack Overflow Vulnerability in Xpedition Layout Browser
SSA-784849	6.7	Direct Memory Access Vulnerabilities in SIMATIC CP Devices
SSA-770890	7.5	Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices
SSA-712929	7.5	Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products UPDATE
SSA-711309	7.5	Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products UPDATE
SSA-710008	9.1	Multiple Web Vulnerabilities in SCALANCE Products UPDATE
SSA-647455	7.1	Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices
SSA-594373	8.3	Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14
SSA-524778	7.8	File Parsing Vulnerabilities in Tecnomatix Plant Simulation
SSA-516174	8.4	Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D UPDATE
SSB-439005	n/a	Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP UPDATE
SSA-413565	7.6	Multiple Vulnerabilities in SCALANCE Products UPDATE
SSA-386812	9.8	Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1
SSA-363107	7.8	An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode UPDATE
SSA-295483	5.3	User Enumeration Vulnerability in Mendix Forgot Password Module
SSA-285795	6.5	Denial of Service in OPC-UA in Industrial Products UPDATE
SSA-250085	7.3	Multiple Vulnerabilities in SINEC NMS and SINEMA Server UPDATE
SSA-240541	9.0	WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products UPDATE
SSA-203374	7.4	Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices UPDATE
SSA-160243	7.8	Multiple Vulnerabilities in SINEC NMS before V2.0
SSA-134651	9.8	Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices
SSA-035466	7.8	Incorrect Permission Assignment in SICAM PAS/PQS