Cybersecurity

The NCCIC has released an advisory on a vulnerability in Geutebruck IP Cameras. Firmware version 1.12.0.4 of G-Cam/EFD-2250 and firmware version 3.15.1 of Topline TopFD-2125 are affected. Successful exploitation of these vulnerabilities could lead to proxy network scans, access to a database, adding an unauthorized user to the system, full configuration download including passwords, and remote code execution. Geutebrück recommends G-Cam/EFD-2250 users download and update to the newest firmware version, 1.12.0.19.

March 20, 2018

The NCCIC has updated this advisory with additional details on affected products and mitigation measures. ICS-CERT.

February 27, 2018

The NCCIC has released an advisory on vulnerabilities in OSIsoft PI Vision. PI Vision versions 2017 and prior are affected. Successful exploitation of these vulnerabilities could allow remote code execution and expose information. OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1. The NCCIC also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.

ICS-CERT has released an advisory on vulnerabilities in Siemens SIPROTEC 4, SIPROTEC Compact, and Reyrolle Devices using the EN100 Ethernet Communication Module Extension. Numerous versions of these product are affected. Successful exploitation of this vulnerability could allow an attacker to either upgrade or downgrade the firmware of the device, including downgrading to older versions with known vulnerabilities. For EN100 Ethernet module IEC 61850 variant (all versions prior to V4.30), Siemens recommends users update to V4.30.