Siemens Energy PLUSCONTROL

🗓️ 11 Jan 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 50 Views

Siemens Energy PLUSCONTROL vulnerabilities - Type Confusion, Improper Validation, Buffer Access, Integer Underflow, Improper Handling of Element

Reporter	Title	Published	Views	Family All 87
Android Security Bulletins	Android Security Bulletin—January 2022Stay organized with collectionsSave and categorize content based on your preferences.	4 Jan 202200:00	–	androidsecurity
BDU FSTEC	The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing SACK TCP packets. This vulnerability allows an attacker to gain access to protected information or cause service interruptions.	9 Mar 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Siemens’ TFTP-server implementation for software and software-hardware products arises from the operation that goes beyond buffer boundaries in memory, allowing attackers to gain access to protected information.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing TCP packet headers. This vulnerability allows attackers to gain access to protected information or cause service interruptions.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing ICMP packet headers. This vulnerability allows attackers to gain access to protected information or cause service interruptions.	20 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing UDP packet headers. This vulnerability allows an attacker to gain access to protected information or cause a service failure.	20 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-31344	9 Nov 202114:30	–	circl
Circl	CVE-2021-31345	9 Nov 202114:30	–	circl
Circl	CVE-2021-31346	9 Nov 202114:30	–	circl
Circl	CVE-2021-31885	9 Nov 202114:30	–	circl

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/csaf/ssa-845392.json
cert-portal	www.cert-portal.siemens.com/productcert/txt/ssa-845392.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-013-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-013-03
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

11 Jan 2022 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 26.4

CVSS 3.18.2 - 9.1

CVSS 46.9

EPSS0.02496