Firma Siemens informuje o nowych podatnościach w swoich produktach oraz aktualizuje starsze biuletyny (P24-045)

utworzone przez | lut 13, 2024 | ICS

13 lutego 2024 r. firma Siemens opublikowała porady dotyczące bezpieczeństwa mające na celu usunięcie luk w zabezpieczeniach wielu produktów.

IDCVSSOpis/link
SSA-9995887.5Multiple Vulnerabilities in User Management Component (UMC) before V2.11.2–AKTUALIZACJA
SSA-9439259.8Multiple Vulnerabilities in SINEC NMS before V2.0 SP1
SSA-8717177.8Multiple Vulnerabilities in Polarion ALM
SSA-8067429.8Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4
SSA-7972967.8XT File Parsing Vulnerability in Parasolid
SSA-7946979.8Vulnerabilities in the Linux Kernel of the SIMATIC S7-1500 TM MFP V1.0 AKTUALIZACJA
SSA-7537466.5Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
SSA-7161649.8Multiple Vulnerabilities in Scalance W1750D
SSA-7113097.5Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products AKTUALIZACJA
SSA-6650345.3Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices
SSA-6470687.5Ripple20 in SIMATIC RTLS Gateways
SSA-6029369.1Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1
SSA-5802289.8Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
SSA-5435027.8Local Privilege Escalation Vulnerability in Unicam FX
SSA-5168187.5TCP Sequence Number Validation Vulnerability in the TCP/IP Stack of CP343-1 Devices
SSB-439005n/aVulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP < V3.1 AKTUALIZACJA
SSA-4340327.1Input Validation Vulnerability in the DHCP Client of Nucleus RTOS
SSA-3983309.8Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1 AKTUALIZACJA
SSA-3095717.5IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)
SSA-2482897.5Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS AKTUALIZACJA
SSA-1086967.5Multiple Vulnerabilities in SIDIS Prime before V4.0.400
SSA-0177967.8Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation
SSA-0000727.8Multiple File Parsing Vulnerabilities in Simcenter Femap