Cybersecurity

ICS-CERT has released an advisory on a Delta Electronics Delta Industrial Automation DOPSoft vulnerability. Delta Industrial Automation DOPSoft version 4.00.01 and prior are affected. Successful exploitation of this vulnerability could cause the device the attacker is accessing to crash; a buffer overflow condition may allow remote code execution. Delta Electronics recommends affected users update to the latest version of DOPSoft Version 4.00.04. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.

ICS-CERT has released an advisory on a Siemens SIMATC, SIMOTION, and SINUMERIK vulnerability. Numerous versions of this product are affected. Successful exploitation of these vulnerabilities could result in execution of arbitrary code, extended privileges, and unauthenticated access to sensitive data. As a general security measure, Siemens strongly recommends protecting network access to devices with appropriate mechanisms.

ICS-CERT has released an advisory on a Siemens SIMATIC Industrial PCs vulnerability. Siemens reports the vulnerability affects a number of versions of SIMATIC Industrial PCs using a version of Infineon’s Trusted Platform Model (TPM). Successful exploitation of this vulnerability could make it easier for attackers to conduct cryptographic attacks against the key material. As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.

February 27, 2018

ICS-CERT has updated this advisory with additional information about affected products and mitigation details. ICS-CERT.

October 10, 2017
ICS-CERT has updated this advisory with mitigation details. ICS-CERT.