Siemens SINEMA Remote Connect (Update A)

🗓️ 09 Apr 2019 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 208 Views

Siemens SINEMA Remote Connect (Update A) advisory states that SINEMA Remote Connect (Client and Server) by Siemens is affected by multiple vulnerabilities such as Incorrect Calculation of Buffer Size, Out-of-bounds Read, and Stack-based Buffer Overflow, allowing unauthorized system access and privileged function execution

Reporter	Title	Published	Views	Family All 358
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in cURL (CVE-2018-14618)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	29 Mar 201911:00	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Monitoring	7 Mar 201920:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Cloud Pak System (CVE-2018-14618)	6 May 202012:02	–	ibm

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-099-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-19-099-04
us-cert	www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
cert-portal	www.cert-portal.siemens.com/productcert/txt/SSA-436177.txt

09 Apr 2019 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 37.5 - 9.8

CVSS 210

CVSS 3.19.8

EPSS0.18518

SSVC