Firma Siemens informuje o nowych podatnościach w swoich produktach oraz aktualizuje starsze biuletyny (P24-045)

cert.pse-online.pl 10 miesięcy temu

13 lutego 2024 r. firma Siemens opublikowała porady dotyczące bezpieczeństwa mające na celu usunięcie luk w zabezpieczeniach wielu produktów.

ID	CVSS	Opis/link
SSA-999588	7.5	Multiple Vulnerabilities in User Management Component (UMC) before V2.11.2–AKTUALIZACJA
SSA-943925	9.8	Multiple Vulnerabilities in SINEC NMS before V2.0 SP1
SSA-871717	7.8	Multiple Vulnerabilities in Polarion ALM
SSA-806742	9.8	Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4
SSA-797296	7.8	XT File Parsing Vulnerability in Parasolid
SSA-794697	9.8	Vulnerabilities in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0 AKTUALIZACJA
SSA-753746	6.5	Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
SSA-716164	9.8	Multiple Vulnerabilities in Scalance W1750D
SSA-711309	7.5	Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products AKTUALIZACJA
SSA-665034	5.3	Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices
SSA-647068	7.5	Ripple20 in SIMATIC RTLS Gateways
SSA-602936	9.1	Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1
SSA-580228	9.8	Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
SSA-543502	7.8	Local Privilege Escalation Vulnerability in Unicam FX
SSA-516818	7.5	TCP Sequence Number Validation Vulnerability in the TCP/IP Stack of CP343-1 Devices
SSB-439005	n/a	Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP < V3.1 AKTUALIZACJA
SSA-434032	7.1	Input Validation Vulnerability in the DHCP Client of Nucleus RTOS
SSA-398330	9.8	Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1 AKTUALIZACJA
SSA-309571	7.5	IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)
SSA-248289	7.5	Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS AKTUALIZACJA
SSA-108696	7.5	Multiple Vulnerabilities in SIDIS Prime before V4.0.400
SSA-017796	7.8	Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation
SSA-000072	7.8	Multiple File Parsing Vulnerabilities in Simcenter Femap