You are here

Home » Cybersecurity

Cybersecurity

Schneider Electric IGSS Mobile (ICSA-18-046-03) – Product Used in the Energy Sector

ICS-CERT has released an advisory on a Schneider Electric IGSS Mobile vulnerability. All versions including and prior to 3.01 of IGSS Mobile for Android and IGSS Mobile for iOS are affected. Successful exploitation of these vulnerabilities could allow an attacker to execute a man-in-the-middle attack. In addition, passwords can be accessed by unauthorized users. An update for Android with the fix for these vulnerabilities is available for download on Google Play.

Tags: 
ics-cert schneider electric

GE D60 Line Distance Relay (ICSA-18-046-02) – Product Used in the Energy Sector

ICS-CERT has released an advisory on a GE D60 Line Distance Relay vulnerability. D60 devices running firmware Version 7.11 and prior are affected. Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary code on the device. GE has released firmware that addresses the vulnerabilities. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.

Tags: 
ics-cert ge

Nortek Linear eMerge E3 Series (ICSA-18-046-01)

ICS-CERT had released an advisory on a Nortek Linear eMerge E3 Series vulnerability. Linear eMerge E3 series Versions V0.32-07e and prior are affected. Successful exploitation of this vulnerability could allow a remote attacker to execute malicious code on the system with elevated privileges, allowing for full control of the server. Nortek recommends that affected users upgrade by following the process outlined on Page 47 of the E3 User Programming Guide. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.

Tags: 
ics-cert nortek

Schneider Electric IGSS SCADA Software (ICSA-18-044-02) – Product Used in the Energy Sector

ICS-CERT has released an advisory on a Schneider Electric IGSS SCADA Software vulnerability. IGSS SCADA Software V12 and all previous versions are affected. Successful exploitation of this vulnerability could cause the device the attacker is accessing to crash or execute arbitrary code. Schneider Electric has provided IGSS SCADA Software V13 to address this vulnerability.  ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability.

Tags: 
ics-cert schneider electric

WAGO PFC200 Series (ICSA-18-044-01) – Product Used in the Energy Sector

ICS-CERT has released an advisory on a WAGO PFC200 Series vulnerability. Numerous versions of this product are affected. Successful exploitation of this vulnerability could allow a remote attacker unauthorized access to the PLC to perform operations on the file system without authentication. WAGO released a security patch with FW11. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.

Tags: 
ics-cert wago

3S-Smart Software Solutions GmbH CODESYS Web Server (ICSA-18-032-02) – Product Used in the Energy Sector

ICS-CERT has released an advisory on a 3S-Smart Software Solutions GmbH CODESYS Web Server vulnerability. All Microsoft Windows (also WinCE) based CODESYS web servers running stand-alone Version 2.3, or as part of the CODESYS runtime system running prior to Version V1.1.9.19, are affected. Successful exploitation of this vulnerability could cause the device the attacker is accessing to crash, resulting in a buffer overflow condition that may allow remote code execution.

Tags: 
ics-cert 3s-smart software solutions

Fuji Electric V-Server VPR (ICSA-18-032-01)

ICS-CERT has released an advisory on a Fuji Electric V-Server VPR vulnerability. Versions 4.0.1.0 and prior are affected. Successful exploitation of this vulnerability could allow a remote attacker to view sensitive information and disrupt the availability of the device. Fuji Electric has produced firmware 4.0.3.0. ICS-CERT also recommends a series of defensive measures to minimize the risk of exploitation of this vulnerability. ICS-CERT.

Tags: 
ics-cert fuji electric

Gemalto Sentinel License Manager (ICSA-18-032-03)

ICS-CERT has released an advisory on a Gemalto Sentinel License Manager vulnerability. All HASP SRM, Sentinel HASP, and Sentinel LDK products prior to Sentinel LDK RTE 7.55 are affected. Successful exploitation of these vulnerabilities could lead to remote code execution or cause a denial-of-service condition, rendering the Sentinel LDK License Manager service unavailable.

Tags: 
ics-cert gemalto

Pages

Subscribe to Cybersecurity