ICSA-18-060-01_Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A)

🗓️ 01 Mar 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 128 Views

Siemens SIMATIC, SIMOTION, and SINUMERIK (Update A). Vulnerabilities could lead to execution of arbitrary code, extended privileges, and unauthenticated access to sensitive data. Affected products include Industrial PCs and BIOS versions. Mitigations provided

Reporter	Title	Published	Views	Family All 81
Apple	About the security content of macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan	23 Jan 201800:00	–	apple
Apple	About the security content of macOS High Sierra 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan - Apple Support	17 Nov 201812:29	–	apple
BDU FSTEC	Multiple vulnerabilities in the Intel Management Engine sub-system of the microprogramming software of the Platform Controller Hub family, which allow unauthorized code execution	6 Oct 201700:00	–	bdu_fstec
BDU FSTEC	Multiple vulnerabilities in the Intel Server Platform Services (SPS) subsystem of the Platform Controller Hub microprogramming system, which allow unauthorized code to be executed	5 Dec 201700:00	–	bdu_fstec
BDU FSTEC	Multiple vulnerabilities in the Intel Trusted Execution Engine (TXE) subsystem of the Platform Controller Hub family of microprogramming devices, which allow unauthorized code to be executed	5 Dec 201700:00	–	bdu_fstec
BDU FSTEC	Multiple vulnerabilities in the Intel Management Engine subsystem of the Microprogramming Software for the Platform Controller Hub family, which allow attackers to enhance their privileges	7 Dec 201700:00	–	bdu_fstec
BDU FSTEC	Multiple vulnerabilities in the Intel Server Platform Services (SPS) subsystem of the Platform Controller Hub microprogramming software family, which allow attackers to enhance their privileges	7 Dec 201700:00	–	bdu_fstec
BDU FSTEC	Multiple vulnerabilities in the Intel Trusted Execution Engine (TXE) subsystem of the Platform Controller Hub family of microcontrollers, which allow attackers to enhance their privileges	7 Dec 201700:00	–	bdu_fstec
BDU FSTEC	The numerous vulnerabilities of the Active Management Technology (AMT) and Intel Management Engine (ME) microprogramming systems within the Platform Controller Hub family enable the execution of arbitrary code.	7 Dec 201700:00	–	bdu_fstec
Circl	CVE-2017-5705	29 Aug 202416:29	–	circl

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-060-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-060-01

01 Mar 2018 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 29

CVSS 37.8

CVSS 3.17.2

EPSS0.02438