CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen 15 Industrial Control Systems ICS advisories on February 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...

CVE-2022-35868

A vulnerability has been identified in TIA Multiuser Server V14 All versions, TIA Multiuser Server V15 All versions V15.1 Update 8, TIA Project-Server All versions V1.1, TIA Project-Server V16 All versions, TIA Project-Server V17 All versions V17 Update 6. Affected applications contain an untrust...

CVE-2022-35868

A vulnerability has been identified in TIA Multiuser Server V14 All versions, TIA Multiuser Server V15 All versions V15.1 Update 8, TIA Project-Server All versions V1.1, TIA Project-Server V16 All versions, TIA Project-Server V17 All versions V17 Update 6. Affected applications contain an untrust...

Path traversal

A vulnerability has been identified in TIA Multiuser Server V14 All versions, TIA Multiuser Server V15 All versions V15.1 Update 8, TIA Project-Server All versions V1.1, TIA Project-Server V16 All versions, TIA Project-Server V17 All versions V17 Update 6. Affected applications contain an...

CVE-2022-35868

A vulnerability has been identified in TIA Multiuser Server V14 All versions, TIA Multiuser Server V15 All versions V15.1 Update 8, TIA Project-Server All versions V1.1, TIA Project-Server V16 All versions, TIA Project-Server V17 All versions V17 Update 6. Affected applications contain an untrust...

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 (KB5002353)

Description of the security update for SharePoint Server Subscription Edition: February 14, 2023 KB5002353 Summary This security update resolves a Microsoft SharePoint Server elevation of privilege vulnerability and Microsoft Word remote code execution vulnerability. To learn more about the...

PT-2023-1971 · Siemens · Tia Multiuser Server +1

Name of the Vulnerable Software and Affected Versions: TIA Multiuser Server versions prior to V15.1 Update 8 TIA Project-Server versions prior to V1.1 TIA Project-Server V16 All versions TIA Project-Server V17 versions prior to V17 Update 6 Description: The issue is related to an untrusted search...

Siemens TIA Project-Server formerly known as TIA Multiuser Server

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens TIA Multiuser Server 代码问题漏洞

TIA Project Server formerly known as TIA Multiuser Server is a fully-integrated automation multi-user application from Siemens, Germany. Siemens TIA Project-Server formerly suffers from an untrusted search path vulnerability that could be exploited by attackers to elevate privileges...

Description of the security update for SharePoint Server 2019: December 13, 2022 (KB5002311)

Description of the security update for SharePoint Server 2019: December 13, 2022 KB5002311 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common...

Description of the security update for SharePoint Server 2019: September 13, 2022 (KB5002258)

Description of the security update for SharePoint Server 2019: September 13, 2022 KB5002258 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the vulnerabilities...

Description of the security update for SharePoint Server Subscription Edition: September 13, 2022 (KB5002271)

Description of the security update for SharePoint Server Subscription Edition: September 13, 2022 KB5002271 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint remote code execution vulnerability. To learn more about the...

Description of the security update for SharePoint Server Subscription Edition: April 12, 2022 (KB5002191)

Description of the security update for SharePoint Server Subscription Edition: April 12, 2022 KB5002191 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability and Microsoft Excel remote code execution vulnerability. To learn more about the vulnerabilities, see...

Description of the security update for SharePoint Enterprise Server 2016: April 12, 2022 (KB5002183)

Description of the security update for SharePoint Enterprise Server 2016: April 12, 2022 KB5002183 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability and Microsoft Excel remote code execution vulnerability. To learn more about the vulnerabilities, see the...

Description of the security update for SharePoint Server 2019: April 12, 2022 (KB5002180)

Description of the security update for SharePoint Server 2019: April 12, 2022 KB5002180 Summary This security update resolves a Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-24472. Note: To...

Description of the security update for SharePoint Server Subscription Edition: February 8, 2022 (KB5002145)

Description of the security update for SharePoint Server Subscription Edition: February 8, 2022 KB5002145 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, Microsoft SharePoint Server spoofing vulnerability, and Microsoft SharePoint Server...

Description of the security update for SharePoint Server 2019: January 11, 2022 (KB5002109)

Description of the security update for SharePoint Server 2019: January 11, 2022 KB5002109 Summary This security update resolves a Microsoft Office remote code execution vulnerability and Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerabilities, see...

Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 (KB5002113)

Description of the security update for SharePoint Enterprise Server 2016: January 11, 2022 KB5002113 Summary This security update resolves a Microsoft Word remote code execution vulnerability, Microsoft Office remote code execution vulnerability, and Microsoft SharePoint Server remote code...

January 4, 2022, update for Project 2016 (KB4504713)

January 4, 2022, update for Project 2016 KB4504713 This article describes update 4504713 for Microsoft Project 2016 that was released on January 4, 2022.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2016. It doesn't apply...

Description of the security update for SharePoint Server 2019: December 14, 2021 (KB5002054)

Description of the security update for SharePoint Server 2019: December 14, 2021 KB5002054 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server spoofing vulnerability. To learn more about the vulnerabilities, see t...