Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2020-12525 (GCVE-0-2020-12525)
Vulnerability from cvelistv5 – Published: 2021-01-22 19:01 – Updated: 2024-09-16 23:11- CWE-502 - Deserialization of Untrusted Data
| URL | Tags |
|---|---|
| https://cert.vde.com/en-us/advisories/vde-2020-038 | x_refsource_CONFIRM |
| https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05 | x_refsource_MISC |
| Vendor | Product | Version | |
|---|---|---|---|
| M&M Software | fdtCONTAINER Component |
Affected:
unspecified , < 3.5
(custom)
Affected: 3.5 , < 3.5.20304.x (custom) Affected: 3.6 , < 3.6.20304.x (custom) |
|
| M&M Software | fdtCONTAINER Application |
Affected:
unspecified , < 4.5
(custom)
Affected: 4.5 , < 4.5.20304.x (custom) Affected: 4.6 , < 4.6.20304.x (custom) |
|
| M&M Software | dtmlINSPECTOR |
Affected:
3
|
|
| Pepperl+Fuchs/PACTware | PACTware |
Affected:
unspecified , ≤ 5.0.5.31
(custom)
|
|
| Weidmüller | WI Manager |
Affected:
unspecified , ≤ 2.5.1
(custom)
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T11:56:52.074Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "fdtCONTAINER Component",
"vendor": "M\u0026M Software",
"versions": [
{
"lessThan": "3.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "3.5.20304.x",
"status": "affected",
"version": "3.5",
"versionType": "custom"
},
{
"lessThan": "3.6.20304.x",
"status": "affected",
"version": "3.6",
"versionType": "custom"
}
]
},
{
"product": "fdtCONTAINER Application",
"vendor": "M\u0026M Software",
"versions": [
{
"lessThan": "4.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "4.5.20304.x",
"status": "affected",
"version": "4.5",
"versionType": "custom"
},
{
"lessThan": "4.6.20304.x",
"status": "affected",
"version": "4.6",
"versionType": "custom"
}
]
},
{
"product": "dtmlINSPECTOR",
"vendor": "M\u0026M Software",
"versions": [
{
"status": "affected",
"version": "3"
}
]
},
{
"product": "PACTware",
"vendor": "Pepperl+Fuchs/PACTware",
"versions": [
{
"lessThanOrEqual": "5.0.5.31",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "WI Manager",
"vendor": "Weidm\u00fcller",
"versions": [
{
"lessThanOrEqual": "2.5.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Reported by a customer of the fdtCONTAINER component. Coordinated by CERT@VDE"
}
],
"datePublic": "2021-01-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-502",
"description": "CWE-502 Deserialization of Untrusted Data",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-01-29T14:58:35.000Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
],
"solutions": [
{
"lang": "en",
"value": "M\u0026M Software provides two updated fdtCONTAINER component trees (3.6.20304.x \u003c 3.7 and \u003e= 3.7) see advisory https://cert.vde.com/en-us/advisories/vde-2020-048 for details."
}
],
"source": {
"advisory": "VDE-2020-048",
"defect": [
"VDE-2020-048"
],
"discovery": "EXTERNAL"
},
"title": "WAGO/M\u0026M Software Deserialization of untrusted data in fdtCONTAINER component",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2021-01-14T11:00:00.000Z",
"ID": "CVE-2020-12525",
"STATE": "PUBLIC",
"TITLE": "WAGO/M\u0026M Software Deserialization of untrusted data in fdtCONTAINER component"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "fdtCONTAINER Component",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "3.5"
},
{
"version_affected": "\u003c",
"version_name": "3.5",
"version_value": "3.5.20304.x"
},
{
"version_affected": "\u003c",
"version_name": "3.6",
"version_value": "3.6.20304.x"
}
]
}
},
{
"product_name": "fdtCONTAINER Application",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "4.5"
},
{
"version_affected": "\u003c",
"version_name": "4.5",
"version_value": "4.5.20304.x"
},
{
"version_affected": "\u003c",
"version_name": "4.6",
"version_value": "4.6.20304.x"
}
]
}
},
{
"product_name": "dtmlINSPECTOR",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "3"
}
]
}
}
]
},
"vendor_name": "M\u0026M Software"
},
{
"product": {
"product_data": [
{
"product_name": "PACTware",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "5.0.5.31"
}
]
}
}
]
},
"vendor_name": "Pepperl+Fuchs/PACTware"
},
{
"product": {
"product_data": [
{
"product_name": "WI Manager",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "2.5.1"
}
]
}
}
]
},
"vendor_name": "Weidm\u00fcller"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Reported by a customer of the fdtCONTAINER component. Coordinated by CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-502 Deserialization of Untrusted Data"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-038",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05",
"refsource": "MISC",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
]
},
"solution": [
{
"lang": "en",
"value": "M\u0026M Software provides two updated fdtCONTAINER component trees (3.6.20304.x \u003c 3.7 and \u003e= 3.7) see advisory https://cert.vde.com/en-us/advisories/vde-2020-048 for details."
}
],
"source": {
"advisory": "VDE-2020-048",
"defect": [
"VDE-2020-048"
],
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2020-12525",
"datePublished": "2021-01-22T19:01:56.886Z",
"dateReserved": "2020-04-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:11:43.568Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2020-12525",
"date": "2026-06-03",
"epss": "0.00106",
"percentile": "0.28266"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2020-12525\",\"sourceIdentifier\":\"info@cert.vde.com\",\"published\":\"2021-01-22T19:15:12.443\",\"lastModified\":\"2024-11-21T04:59:52.110\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.\"},{\"lang\":\"es\",\"value\":\"El componente fdtCONTAINER de M\u0026amp;M Software en versiones por debajo de 3.5.20304.x y entre 3.6 y 3.6.20304.x, es vulnerable a una deserializaci\u00f3n de datos que no son de confianza en el almacenamiento de su proyecto\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.3,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-502\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:emerson:rosemount_transmitter_interface_software:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"74D63DB1-9EC0-4198-A7C4-243169F2BAE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pepperl-fuchs:pactware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndIncluding\":\"5.0.5.31\",\"matchCriteriaId\":\"A5C2E91B-B550-45A6-B2F9-33CE38DC20B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:dtminspector_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5720340-CED1-4944-BD7B-2BAEF771A84A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5\",\"matchCriteriaId\":\"D9960023-1704-4322-A7F5-48BEA28D4A4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.5.0\",\"versionEndIncluding\":\"4.5.20304\",\"matchCriteriaId\":\"F6045339-C7DD-4BB3-AE65-ED2E47DEBE2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.6.0\",\"versionEndIncluding\":\"4.6.20304\",\"matchCriteriaId\":\"CC96D4F1-0492-4747-89D2-7E7B07C4187F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5\",\"matchCriteriaId\":\"9DE11E01-09CC-4F66-AD04-026D29DF7171\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.5.0\",\"versionEndIncluding\":\"3.5.20304\",\"matchCriteriaId\":\"CD473DF7-23BE-414F-9E3D-9280303FD1FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.6.0\",\"versionEndIncluding\":\"3.6.20304\",\"matchCriteriaId\":\"8AC44D07-AAC5-4A6E-AD16-30D26E5EBF34\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:weidmueller:wi_manager:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.5.1\",\"matchCriteriaId\":\"157A3D79-5A38-45F7-96C7-0504B2367DA6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:pepperl-fuchs:io-link_master_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.5.48\",\"matchCriteriaId\":\"79BE3599-8D93-4FDB-A3AA-6EA0A6261FDA\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_4-eip:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBEBC489-E022-4DFC-9CEB-56CFE6390EFE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_4-pnio:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E69B5DC-3B1C-4FDB-88B2-A8D9AB75C43E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83573CB5-AEFE-496F-B5AC-218CDE60DC74\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E00DEDAE-F737-4E8B-8D75-5B00DC357DEB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC03E5F9-08B6-4AE8-8B12-843E4A22FC67\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD25566D-513D-4BA3-8035-CC724E523898\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA2F24AD-E230-47C9-A6C1-241649CC7C6A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E0C433E-211D-4618-A891-126067DBF78F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"70A4F878-EB5A-4733-8882-93707F58C2C5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D97A0A5-3BA7-4D22-83EB-D3C856D641E6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3F02A39-35DC-4D14-91A0-46C9448FA562\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-t:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E91F7C2F-044D-496D-8086-8FE041EB930A\"}]}]}],\"references\":[{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2020-038\",\"source\":\"info@cert.vde.com\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05\",\"source\":\"info@cert.vde.com\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://cert.vde.com/en-us/advisories/vde-2020-038\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Not Applicable\",\"Third Party Advisory\"]},{\"url\":\"https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}"
}
}
CERTFR-2021-AVI-517
Vulnerability from certfr_avis - Published: 2021-07-13 - Updated: 2021-07-13
De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un dénis de service, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
- EcoStruxure Control Expert toutes versions (versions Unity Pro inclus) antérieures 15.0 SP1
- EcoStruxure Control Expert version antérieures à V15.0 SP1 sans le dernier correctif
- EcoStruxure Process Expert toutes versions (versions EcoStruxure Hybrid DCS inclus)
- SCADAPack RemoteConnect for x70 toutes versions
- Modicon M580 CPU (part numbers BMEP* et BMEH*) toutes versions
- Modicon M340 CPU (part numbers BMXP34*) toutes versions
- SoSafe Configurable versions antérieures à 1.8.1
- C-Bus Toolkit versions antérieures à 1.15.9
- Easergy T300 avec un microgiciel (firmware) en versions antérieures à 2.8
- Easergy T200 (Modbus) versions antérieures à SC2-04MOD-07000103
- Easergy T200 (IEC104) versions antérieures à SC2-04IEC-07000103
- Easergy T200 (DNP3) versions antérieures à SC2-04DNP-07000103
- EVlink CityEVC1S22P4 / EVC1S7P4 versions antérieures à R8 V3.4.0.1
- EVlink ParkingEVW2 / EVF2 / EV.2 versions antérieures à R8 V3.4.0.1
- EVlink Smart WallboxEVB1A versions antérieures à R8 V3.4.0.1
Note : Actuellement, aucun correctif n'est proposé pour les vulnérabilités dans les produits EcoStruxure Process Expert, Modicon M580, Modicon M340 et SCADAPack. Cependant des mesures de contournement sont proposées par l'éditeur pour les produits Modicon M580 et M340 afin de réduire le risque et l'impact d'exploitation de la CVE-2021-22779.
| Vendor | Product | Description |
|---|
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cul\u003e \u003cli\u003eEcoStruxure Control Expert toutes versions (versions Unity Pro inclus) ant\u00e9rieures 15.0 SP1\u003c/li\u003e \u003cli\u003eEcoStruxure Control Expert version ant\u00e9rieures \u00e0 V15.0 SP1 sans le dernier correctif\u003c/li\u003e \u003cli\u003eEcoStruxure Process Expert toutes versions (versions EcoStruxure Hybrid DCS inclus)\u003c/li\u003e \u003cli\u003eSCADAPack RemoteConnect for x70 toutes versions\u003c/li\u003e \u003cli\u003eModicon M580 CPU (part numbers BMEP* et BMEH*) toutes versions\u003c/li\u003e \u003cli\u003eModicon M340 CPU (part numbers BMXP34*) toutes versions\u003c/li\u003e \u003cli\u003eSoSafe Configurable versions ant\u00e9rieures \u00e0 1.8.1\u003c/li\u003e \u003cli\u003eC-Bus Toolkit versions ant\u00e9rieures \u00e0 1.15.9\u003c/li\u003e \u003cli\u003eEasergy T300 avec un microgiciel (firmware) en versions ant\u00e9rieures \u00e0 2.8\u003c/li\u003e \u003cli\u003eEasergy T200 (Modbus) versions ant\u00e9rieures \u00e0 SC2-04MOD-07000103\u003c/li\u003e \u003cli\u003eEasergy T200 (IEC104) versions ant\u00e9rieures \u00e0 SC2-04IEC-07000103\u003c/li\u003e \u003cli\u003eEasergy T200 (DNP3) versions ant\u00e9rieures \u00e0 SC2-04DNP-07000103\u003c/li\u003e \u003cli\u003eEVlink CityEVC1S22P4 / EVC1S7P4 versions ant\u00e9rieures \u00e0 R8 V3.4.0.1\u003c/li\u003e \u003cli\u003eEVlink ParkingEVW2 / EVF2 / EV.2 versions ant\u00e9rieures \u00e0 R8 V3.4.0.1\u003c/li\u003e \u003cli\u003eEVlink Smart WallboxEVB1A versions ant\u00e9rieures \u00e0 R8 V3.4.0.1\u003c/li\u003e \u003c/ul\u003e \u003cp\u003e\u003cem\u003eNote : Actuellement, aucun correctif n\u0027est propos\u00e9 pour les vuln\u00e9rabilit\u00e9s dans les produits EcoStruxure Process Expert, Modicon M580, Modicon M340 et SCADAPack. Cependant des mesures de contournement sont propos\u00e9es par l\u0027\u00e9diteur pour les produits Modicon M580 et M340 afin de r\u00e9duire le risque et l\u0027impact d\u0027exploitation de la CVE-2021-22779.\u003c/em\u003e\u003c/p\u003e ",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-22771",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22771"
},
{
"name": "CVE-2021-22721",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22721"
},
{
"name": "CVE-2021-22779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22779"
},
{
"name": "CVE-2021-22781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22781"
},
{
"name": "CVE-2021-22777",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22777"
},
{
"name": "CVE-2021-22780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22780"
},
{
"name": "CVE-2021-22729",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22729"
},
{
"name": "CVE-2021-22708",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22708"
},
{
"name": "CVE-2021-22727",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22727"
},
{
"name": "CVE-2021-22774",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22774"
},
{
"name": "CVE-2021-22773",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22773"
},
{
"name": "CVE-2021-22706",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22706"
},
{
"name": "CVE-2021-22782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22782"
},
{
"name": "CVE-2021-22778",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22778"
},
{
"name": "CVE-2021-22728",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22728"
},
{
"name": "CVE-2021-22730",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22730"
},
{
"name": "CVE-2021-22770",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22770"
},
{
"name": "CVE-2021-22784",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22784"
},
{
"name": "CVE-2021-22769",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22769"
},
{
"name": "CVE-2021-22723",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22723"
},
{
"name": "CVE-2021-22726",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22726"
},
{
"name": "CVE-2021-22722",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22722"
},
{
"name": "CVE-2020-12525",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12525"
},
{
"name": "CVE-2021-22772",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22772"
},
{
"name": "CVE-2021-22707",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22707"
}
],
"initial_release_date": "2021-07-13T00:00:00",
"last_revision_date": "2021-07-13T00:00:00",
"links": [],
"reference": "CERTFR-2021-AVI-517",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSchneider. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire, un d\u00e9nis de service, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9\ndes donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Schneider",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-04 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-04"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-03 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-03"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-02 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-05 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-05"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-06 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet\u0026p_File_Name=SEVD-2021-194-06_EVlink_City_Parking_SmartWallbox_Charging_Stations_Security_Notification.pdf\u0026p_Doc_Ref=SEVD-2021-194-06"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-01 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet\u0026p_File_Name=SEVD-2021-194-01_EcoStruxure_Control_Expert_Process_Expert_SCADAPack_RemoteConnect_Modicon_M580_M340.pdf\u0026p_Doc_Ref=SEVD-2021-194-01"
}
]
}
CERTFR-2022-AVI-215
Vulnerability from certfr_avis - Published: 2022-03-08 - Updated: 2022-03-08
De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
- EcoStruxure Control Expert versions antérieures à 15.1
- EcoStruxure Process Expert versions antérieures à 2021
- SCADAPack RemoteConnect for x70 toutes versions, se référer aux mesures de contournement proposées par l'éditeur
- Smart-UPS séries SMT micrologiciels versions antérieures à UPS 04.6 permettant une correction partielle de la vulnérabilité CVE-2022-0715 et une correction des vulnérabilités CVE-2022-22805 et CVE-2022-22806
- Smart-UPS séries SMC micrologiciels versions antérieures à UPS 04.3 permettant une correction partielle de la vulnérabilité CVE-2022-0715 et une correction des vulnérabilités CVE-2022-22805 et CVE-2022-22806
- Aucun correctif n'est disponible pour les séries Smart-UPS SCL, SMX et SRT ainsi que les séries SmartConnect SMTL, SCL, et SMX. Se référer aux mesures de contournement proposées par l'éditeur
- Ritto Wiser Door toutes versions, se référer aux mesures de contournement proposées par l'éditeur
Pour les vulnérabilités identifiées CVE-2021-22778, CVE-2021-22780, CVE-2021-22781, CVE-2021-22782 et CVE-2020-12525, la mise à niveau vers EcoStruxure Control Expert v15.1 et EcoStruxure Process Expert v2021 constitue une première étape de contournement. L'éditeur annoncera la publication d'un nouveau micrologiciel afin de corriger ces vulnérabilités.
| Vendor | Product | Description |
|---|
| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cul\u003e \u003cli\u003eEcoStruxure Control Expert versions ant\u00e9rieures \u00e0 15.1\u003c/li\u003e \u003cli\u003eEcoStruxure Process Expert versions ant\u00e9rieures \u00e0 2021\u003c/li\u003e \u003cli\u003eSCADAPack RemoteConnect for x70 toutes versions, se r\u00e9f\u00e9rer aux mesures de contournement propos\u00e9es par l\u0027\u00e9diteur\u003c/li\u003e \u003cli\u003eSmart-UPS s\u00e9ries SMT micrologiciels versions ant\u00e9rieures \u00e0 UPS 04.6 permettant une correction partielle de la vuln\u00e9rabilit\u00e9 CVE-2022-0715 et une correction des vuln\u00e9rabilit\u00e9s CVE-2022-22805 et CVE-2022-22806\u003c/li\u003e \u003cli\u003eSmart-UPS s\u00e9ries SMC micrologiciels versions ant\u00e9rieures \u00e0 UPS 04.3 permettant une correction partielle de la vuln\u00e9rabilit\u00e9 CVE-2022-0715 et une correction des vuln\u00e9rabilit\u00e9s CVE-2022-22805 et CVE-2022-22806\u003c/li\u003e \u003cli\u003eAucun correctif n\u0027est disponible pour les s\u00e9ries Smart-UPS SCL, SMX et SRT ainsi que les s\u00e9ries SmartConnect SMTL, SCL, et SMX. Se r\u00e9f\u00e9rer aux mesures de contournement propos\u00e9es par l\u0027\u00e9diteur\u003c/li\u003e \u003cli\u003eRitto Wiser Door toutes versions, se r\u00e9f\u00e9rer aux mesures de contournement propos\u00e9es par l\u0027\u00e9diteur\u003c/li\u003e \u003c/ul\u003e \u003cp\u003ePour les vuln\u00e9rabilit\u00e9s identifi\u00e9es CVE-2021-22778, CVE-2021-22780, CVE-2021-22781, CVE-2021-22782 et CVE-2020-12525, la mise \u00e0 niveau vers EcoStruxure Control Expert v15.1 et EcoStruxure Process Expert v2021 constitue une premi\u00e8re \u00e9tape de contournement. L\u0027\u00e9diteur annoncera la publication d\u0027un nouveau micrologiciel afin de corriger ces vuln\u00e9rabilit\u00e9s.\u003c/p\u003e ",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-24322",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24322"
},
{
"name": "CVE-2021-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21814"
},
{
"name": "CVE-2021-34527",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-34527"
},
{
"name": "CVE-2021-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21830"
},
{
"name": "CVE-2021-22797",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22797"
},
{
"name": "CVE-2021-22779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22779"
},
{
"name": "CVE-2021-22781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22781"
},
{
"name": "CVE-2021-22780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22780"
},
{
"name": "CVE-2021-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21828"
},
{
"name": "CVE-2021-21810",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21810"
},
{
"name": "CVE-2021-21813",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21813"
},
{
"name": "CVE-2022-22806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22806"
},
{
"name": "CVE-2021-21825",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21825"
},
{
"name": "CVE-2021-21829",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21829"
},
{
"name": "CVE-2021-1675",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-1675"
},
{
"name": "CVE-2021-22782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22782"
},
{
"name": "CVE-2021-22778",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22778"
},
{
"name": "CVE-2022-0715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0715"
},
{
"name": "CVE-2021-21826",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21826"
},
{
"name": "CVE-2021-21812",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21812"
},
{
"name": "CVE-2021-21827",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21827"
},
{
"name": "CVE-2022-22805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22805"
},
{
"name": "CVE-2022-24323",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24323"
},
{
"name": "CVE-2021-21815",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21815"
},
{
"name": "CVE-2021-22783",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22783"
},
{
"name": "CVE-2021-21811",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21811"
},
{
"name": "CVE-2020-12525",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12525"
}
],
"initial_release_date": "2022-03-08T00:00:00",
"last_revision_date": "2022-03-08T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-215",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-03-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSchneider. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de\nservice \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Schneider",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-067-02 du 8 mars 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-02"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-313-04 du 09 novembre 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-04"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-257-01 du 14 septembre 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-257-01"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-222-02 du 10 ao\u00fbt 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-02"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-067-01 du 8 mars 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-01"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-067-03 du 8 mars 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-03"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider 2021-194-01 du 13 juillet 2021",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
]
}
CERTFR-2022-AVI-628
Vulnerability from certfr_avis - Published: 2022-07-12 - Updated: 2022-08-22
De multiples vulnérabilités ont été découvertes dans les produits Schneider Electric. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| Schneider Electric | N/A | SpaceLogic C-Bus Home Controller (5200WHC2), C-Bus Wiser Homer Controller MK2 versions antérieures à 4.14.0 (PICED_V4.14.0 Programming Interface for C-Bus Embedded Devices version V4.14.0) | ||
| Schneider Electric | N/A | X80 advanced RTU Communication Module (BMENOR2200H) versions antérieures à 2.01 | ||
| Schneider Electric | N/A | IGSS Data Server versions antérieures à 15.0.0.22074 | ||
| Schneider Electric | N/A | SCADAPack RemoteConnect for x70 versions antérieures à R2.7.3 | ||
| Schneider Electric | N/A | Micrologiciels Easergy P5 versions antérieures à 01.401.102 | ||
| Schneider Electric | N/A | Acti9 PowerTag Link C (A9XELC10-B) versions antérieures à 2.14.0 | ||
| Schneider Electric | N/A | OPC UA Modicon Communication Module (BMENUA0100) versions 1.10 et antérieures | ||
| Schneider Electric | N/A | Acti9 PowerTag Link C (A9XELC10-A) versions antérieures à 2.14.0 | ||
| Schneider Electric | N/A | EcoStruxure Machine Expert versions antérieures à 2.0.3 | ||
| Schneider Electric | N/A | Micrologiciels Smart-UPS SCL, SRT, SRC, & XU Series versions antérieures à 15.0 |
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SpaceLogic C-Bus Home Controller (5200WHC2), C-Bus Wiser Homer Controller MK2 versions ant\u00e9rieures \u00e0 4.14.0 (PICED_V4.14.0 Programming Interface for C-Bus Embedded Devices version V4.14.0)",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "X80 advanced RTU Communication Module (BMENOR2200H) versions ant\u00e9rieures \u00e0 2.01",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "IGSS Data Server versions ant\u00e9rieures \u00e0 15.0.0.22074",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "SCADAPack RemoteConnect for x70 versions ant\u00e9rieures \u00e0 R2.7.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "Micrologiciels Easergy P5 versions ant\u00e9rieures \u00e0 01.401.102",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "Acti9 PowerTag Link C (A9XELC10-B) versions ant\u00e9rieures \u00e0 2.14.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "OPC UA Modicon Communication Module (BMENUA0100) versions 1.10 et ant\u00e9rieures",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "Acti9 PowerTag Link C (A9XELC10-A) versions ant\u00e9rieures \u00e0 2.14.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "EcoStruxure Machine Expert versions ant\u00e9rieures \u00e0 2.0.3",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "Micrologiciels Smart-UPS SCL, SRT, SRC, \u0026 XU Series versions ant\u00e9rieures \u00e0 15.0",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-2329",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-2329"
},
{
"name": "CVE-2021-21814",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21814"
},
{
"name": "CVE-2021-21869",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21869"
},
{
"name": "CVE-2022-34760",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34760"
},
{
"name": "CVE-2021-21830",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21830"
},
{
"name": "CVE-2021-21866",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21866"
},
{
"name": "CVE-2021-22797",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22797"
},
{
"name": "CVE-2022-34753",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34753"
},
{
"name": "CVE-2022-34762",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34762"
},
{
"name": "CVE-2022-34758",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34758"
},
{
"name": "CVE-2021-22779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22779"
},
{
"name": "CVE-2021-22781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22781"
},
{
"name": "CVE-2021-22780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22780"
},
{
"name": "CVE-2021-21828",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21828"
},
{
"name": "CVE-2021-21810",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21810"
},
{
"name": "CVE-2021-21813",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21813"
},
{
"name": "CVE-2022-34761",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34761"
},
{
"name": "CVE-2022-22806",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22806"
},
{
"name": "CVE-2021-21825",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21825"
},
{
"name": "CVE-2022-34759",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34759"
},
{
"name": "CVE-2022-34757",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34757"
},
{
"name": "CVE-2021-21829",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21829"
},
{
"name": "CVE-2021-21863",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21863"
},
{
"name": "CVE-2022-34754",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34754"
},
{
"name": "CVE-2021-22782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22782"
},
{
"name": "CVE-2021-22778",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22778"
},
{
"name": "CVE-2022-34764",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34764"
},
{
"name": "CVE-2022-0715",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-0715"
},
{
"name": "CVE-2021-21865",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21865"
},
{
"name": "CVE-2022-34763",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34763"
},
{
"name": "CVE-2021-21867",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21867"
},
{
"name": "CVE-2022-34756",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34756"
},
{
"name": "CVE-2021-21826",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21826"
},
{
"name": "CVE-2021-21812",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21812"
},
{
"name": "CVE-2021-21827",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21827"
},
{
"name": "CVE-2022-22805",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-22805"
},
{
"name": "CVE-2022-26507",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-26507"
},
{
"name": "CVE-2021-29241",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29241"
},
{
"name": "CVE-2022-34765",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34765"
},
{
"name": "CVE-2021-21815",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21815"
},
{
"name": "CVE-2021-21811",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21811"
},
{
"name": "CVE-2020-12525",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12525"
},
{
"name": "CVE-2021-29240",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-29240"
},
{
"name": "CVE-2021-21864",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21864"
},
{
"name": "CVE-2022-24324",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24324"
},
{
"name": "CVE-2021-21868",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21868"
},
{
"name": "CVE-2021-33485",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-33485"
}
],
"initial_release_date": "2022-07-12T00:00:00",
"last_revision_date": "2022-08-22T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-628",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-07-12T00:00:00.000000"
},
{
"description": "Mise \u00e0 jour des liens",
"revision_date": "2022-08-22T00:00:00.000000"
},
{
"description": "Mise \u00e0 jour des liens",
"revision_date": "2022-08-22T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSchneider Electric. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de\nservice \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Schneider Electric",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2021-194-01 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-194-01_EcoStruxure_Control_Expert_Process_Expert_SCADAPack_RemoteConnect_Modicon_M580_M340_V4.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-193-02 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-193-02_SpaceLogic-C-Bus-Home-Controller-Wiser_MK2_Security_Notification.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-193-01 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-193-01_OPC_UA_X80_Advanced_RTU_Modicon_Communication_Modules_Security_Notification_V3.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-193-03 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-193-03_Acti9_PowerTag_Link_C_Security_Notification.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-011-06 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-011-06_CODESYSV3_Runtime_Development_System_and_Gateway_Security_Notification.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2021-257-01 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-257-01_EcoStruxure_Control_Expert_EcoStruxure_Process_Expert_SCADAPack_Security_Notification_V3.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-067-02 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-02\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-067-02_APC-Smart-UPS_Security_Notification_V6.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-102-01 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-102-01_IGSS_Security_Notification_V2.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2022-193-04 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-04\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-193-04_Easergy_P5_Security_Notification.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider Electric SEVD-2021-222-02 du 12 juillet 2022",
"url": "https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-222-02_AT%26T_Labs-XMILX_DEMILL_Eco_Struxure_Control_ExpertEco_Struxure_Process_Expert_SCADA_Pack_RemoteConnect_x70_Security_Notification_V4.0.pdf"
}
]
}
CERTFR-2022-AVI-717
Vulnerability from certfr_avis - Published: 2022-08-09 - Updated: 2022-09-08
De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Vendor | Product | Description | ||
|---|---|---|---|---|
| N/A | N/A | Eurotherm Data Reviewer3.0.2 software versions antérieures 4.0.0 | ||
| N/A | N/A | Modicon Momentum MDI (171CBU*) toutes versions | ||
| Schneider Electric | N/A | EcoStruxure Control Expert versions antérieures à 15.2 | ||
| Symfony | process | EcoStruxure Process Expert versions antérieures à 2021 | ||
| N/A | N/A | Modicon M580 CPU (BMEP* et BMEH*) versions antérieures à 4.01 | ||
| Schneider Electric | N/A | Legacy Modicon Quantum toutes versions | ||
| N/A | N/A | OPC UA Modicon Communication Module (BMENUA0100) versions antérieures à 2.01 | ||
| Schneider Electric | N/A | Modicon MC80 (BMKC80) toutes versions | ||
| Schneider Electric | Modicon M340 | Modicon M340 CPU (BMXP34*) versions antérieures 3.50 |
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Eurotherm Data Reviewer3.0.2 software versions ant\u00e9rieures 4.0.0",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Modicon Momentum MDI (171CBU*) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "EcoStruxure Control Expert versions ant\u00e9rieures \u00e0 15.2",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "EcoStruxure Process Expert versions ant\u00e9rieures \u00e0 2021",
"product": {
"name": "process",
"vendor": {
"name": "Symfony",
"scada": false
}
}
},
{
"description": "Modicon M580 CPU (BMEP* et BMEH*) versions ant\u00e9rieures \u00e0 4.01",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Legacy Modicon Quantum toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "OPC UA Modicon Communication Module (BMENUA0100) versions ant\u00e9rieures \u00e0 2.01",
"product": {
"name": "N/A",
"vendor": {
"name": "N/A",
"scada": false
}
}
},
{
"description": "Modicon MC80 (BMKC80) toutes versions",
"product": {
"name": "N/A",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
},
{
"description": "Modicon M340 CPU (BMXP34*) versions ant\u00e9rieures 3.50",
"product": {
"name": "Modicon M340",
"vendor": {
"name": "Schneider Electric",
"scada": true
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2019-6846",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6846"
},
{
"name": "CVE-2022-34760",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34760"
},
{
"name": "CVE-2020-35198",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-35198"
},
{
"name": "CVE-2021-22791",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22791"
},
{
"name": "CVE-2022-34762",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34762"
},
{
"name": "CVE-2019-6841",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6841"
},
{
"name": "CVE-2021-45105",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45105"
},
{
"name": "CVE-2021-22779",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22779"
},
{
"name": "CVE-2021-22781",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22781"
},
{
"name": "CVE-2021-22780",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22780"
},
{
"name": "CVE-2021-4104",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-4104"
},
{
"name": "CVE-2021-22790",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22790"
},
{
"name": "CVE-2022-37302",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37302"
},
{
"name": "CVE-2022-34761",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34761"
},
{
"name": "CVE-2022-34759",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34759"
},
{
"name": "CVE-2022-37301",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37301"
},
{
"name": "CVE-2018-7241",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7241"
},
{
"name": "CVE-2021-22786",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22786"
},
{
"name": "CVE-2018-7242",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7242"
},
{
"name": "CVE-2019-6844",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6844"
},
{
"name": "CVE-2019-6842",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6842"
},
{
"name": "CVE-2021-22782",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22782"
},
{
"name": "CVE-2021-22778",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22778"
},
{
"name": "CVE-2022-34764",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34764"
},
{
"name": "CVE-2022-34763",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34763"
},
{
"name": "CVE-2021-45046",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-45046"
},
{
"name": "CVE-2022-37300",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-37300"
},
{
"name": "CVE-2021-22789",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22789"
},
{
"name": "CVE-2019-6847",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6847"
},
{
"name": "CVE-2022-34765",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34765"
},
{
"name": "CVE-2021-44228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44228"
},
{
"name": "CVE-2021-22792",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-22792"
},
{
"name": "CVE-2019-6843",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-6843"
},
{
"name": "CVE-2018-7240",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-7240"
},
{
"name": "CVE-2011-4859",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-4859"
},
{
"name": "CVE-2020-28895",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-28895"
},
{
"name": "CVE-2021-44832",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-44832"
},
{
"name": "CVE-2020-12525",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-12525"
}
],
"initial_release_date": "2022-08-09T00:00:00",
"last_revision_date": "2022-09-08T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-717",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-09T00:00:00.000000"
},
{
"description": "Mise \u00e0 jour des liens",
"revision_date": "2022-08-22T00:00:00.000000"
},
{
"description": "Mise \u00e0 jour des liens des bulletins de s\u00e9curit\u00e9 Schneider SEVD-2022-221-01, SEVD-2022-221-02 et SEVD-2022-221-04 du 9 ao\u00fbt 2022.",
"revision_date": "2022-09-08T00:00:00.000000"
},
{
"description": "Ajout du libell\u00e9 [SCADA] dans le titre.",
"revision_date": "2022-09-08T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits\nSchneider. Certaines d\u0027entre elles permettent \u00e0 un attaquant de\nprovoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de\nservice \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Schneider",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SESB-2021-347-01 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2021-347-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SESB-2021-347-01_Apache_Log4j_Log4Shell_Vulnerabilities_Security_Notification_V14.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2019-281-02 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2019-281-02\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2019-281-02_Modicon_Controllers_Security_Notification_V3.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-221-01 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-221-01_EcoStruxure_Control_Expert_Modicon580_Security_Notification_V1.1.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-193-01 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-193-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-193-01_OPC_UA_X80_Advanced_RTU_Modicon_Communication_Modules_Security_Notification_V3.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-313-05 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-313-05\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-313-05_Badalloc_Vulnerabilities_Security_Notification_V10.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-221-03 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-221-03_EcoStruxure_Control_Expert_Security_Notification.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-221-02 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-02\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-221-02_Modicon_Controllers_Security_Notification_V1.1.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2018-081-01 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2018-081-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2018-081-01_Embedded_FTP_Servers_for_Modicon_PAC_Controllers_Security_Notification_V3.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-222-04 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-04\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-222-04_Modicon_PAC_Controllers_PLC_Simulator_Control_Expert_Process_Expert_Security_Notification_V2.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2021-194-01 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2021-194-01_EcoStruxure_Control_Expert_Process_Expert_SCADAPack_RemoteConnect_Modicon_M580_M340_Security_Notifcation_V4.0.pdf"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Schneider SEVD-2022-221-04 du 9 ao\u00fbt 2022",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-221-04\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2022-221-04-Modicon_Controllers_Ethernet_Modules_Security_Notification_V1.1.pdf"
}
]
}
FKIE_CVE-2020-12525
Vulnerability from fkie_nvd - Published: 2021-01-22 19:15 - Updated: 2024-11-21 04:597.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| URL | Tags | ||
|---|---|---|---|
| info@cert.vde.com | https://cert.vde.com/en-us/advisories/vde-2020-038 | Not Applicable, Third Party Advisory | |
| info@cert.vde.com | https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05 | Third Party Advisory, US Government Resource | |
| af854a3a-2127-422b-91ae-364da2661108 | https://cert.vde.com/en-us/advisories/vde-2020-038 | Not Applicable, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05 | Third Party Advisory, US Government Resource |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:emerson:rosemount_transmitter_interface_software:-:*:*:*:*:*:*:*",
"matchCriteriaId": "74D63DB1-9EC0-4198-A7C4-243169F2BAE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:pepperl-fuchs:pactware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A5C2E91B-B550-45A6-B2F9-33CE38DC20B2",
"versionEndIncluding": "5.0.5.31",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:dtminspector_3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E5720340-CED1-4944-BD7B-2BAEF771A84A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D9960023-1704-4322-A7F5-48BEA28D4A4A",
"versionEndExcluding": "4.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F6045339-C7DD-4BB3-AE65-ED2E47DEBE2F",
"versionEndIncluding": "4.5.20304",
"versionStartIncluding": "4.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CC96D4F1-0492-4747-89D2-7E7B07C4187F",
"versionEndIncluding": "4.6.20304",
"versionStartIncluding": "4.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9DE11E01-09CC-4F66-AD04-026D29DF7171",
"versionEndExcluding": "3.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CD473DF7-23BE-414F-9E3D-9280303FD1FA",
"versionEndIncluding": "3.5.20304",
"versionStartIncluding": "3.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8AC44D07-AAC5-4A6E-AD16-30D26E5EBF34",
"versionEndIncluding": "3.6.20304",
"versionStartIncluding": "3.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:weidmueller:wi_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "157A3D79-5A38-45F7-96C7-0504B2367DA6",
"versionEndIncluding": "2.5.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:pepperl-fuchs:io-link_master_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "79BE3599-8D93-4FDB-A3AA-6EA0A6261FDA",
"versionEndIncluding": "1.5.48",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BBEBC489-E022-4DFC-9CEB-56CFE6390EFE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2E69B5DC-3B1C-4FDB-88B2-A8D9AB75C43E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "83573CB5-AEFE-496F-B5AC-218CDE60DC74",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip-l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E00DEDAE-F737-4E8B-8D75-5B00DC357DEB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EC03E5F9-08B6-4AE8-8B12-843E4A22FC67",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio-l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CD25566D-513D-4BA3-8035-CC724E523898",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FA2F24AD-E230-47C9-A6C1-241649CC7C6A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E0C433E-211D-4618-A891-126067DBF78F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "70A4F878-EB5A-4733-8882-93707F58C2C5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2D97A0A5-3BA7-4D22-83EB-D3C856D641E6",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-p:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A3F02A39-35DC-4D14-91A0-46C9448FA562",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-t:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E91F7C2F-044D-496D-8086-8FE041EB930A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
},
{
"lang": "es",
"value": "El componente fdtCONTAINER de M\u0026amp;M Software en versiones por debajo de 3.5.20304.x y entre 3.6 y 3.6.20304.x, es vulnerable a una deserializaci\u00f3n de datos que no son de confianza en el almacenamiento de su proyecto"
}
],
"id": "CVE-2020-12525",
"lastModified": "2024-11-21T04:59:52.110",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9,
"source": "info@cert.vde.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2021-01-22T19:15:12.443",
"references": [
{
"source": "info@cert.vde.com",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"source": "info@cert.vde.com",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
],
"sourceIdentifier": "info@cert.vde.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
],
"source": "info@cert.vde.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-V82R-X75J-XWXM
Vulnerability from github – Published: 2022-05-24 17:40 – Updated: 2022-05-24 17:40M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
{
"affected": [],
"aliases": [
"CVE-2020-12525"
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-01-22T19:15:00Z",
"severity": "HIGH"
},
"details": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.",
"id": "GHSA-v82r-x75j-xwxm",
"modified": "2022-05-24T17:40:03Z",
"published": "2022-05-24T17:40:03Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12525"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"type": "WEB",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2020-12525
Vulnerability from gsd - Updated: 2023-12-13 01:21{
"GSD": {
"alias": "CVE-2020-12525",
"description": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.",
"id": "GSD-2020-12525"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2020-12525"
],
"details": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.",
"id": "GSD-2020-12525",
"modified": "2023-12-13T01:21:49.085600Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2021-01-14T11:00:00.000Z",
"ID": "CVE-2020-12525",
"STATE": "PUBLIC",
"TITLE": "WAGO/M\u0026M Software Deserialization of untrusted data in fdtCONTAINER component"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "fdtCONTAINER Component",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "3.5"
},
{
"version_affected": "\u003c",
"version_name": "3.5",
"version_value": "3.5.20304.x"
},
{
"version_affected": "\u003c",
"version_name": "3.6",
"version_value": "3.6.20304.x"
}
]
}
},
{
"product_name": "fdtCONTAINER Application",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "4.5"
},
{
"version_affected": "\u003c",
"version_name": "4.5",
"version_value": "4.5.20304.x"
},
{
"version_affected": "\u003c",
"version_name": "4.6",
"version_value": "4.6.20304.x"
}
]
}
},
{
"product_name": "dtmlINSPECTOR",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "3"
}
]
}
}
]
},
"vendor_name": "M\u0026M Software"
},
{
"product": {
"product_data": [
{
"product_name": "PACTware",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "5.0.5.31"
}
]
}
}
]
},
"vendor_name": "Pepperl+Fuchs/PACTware"
},
{
"product": {
"product_data": [
{
"product_name": "WI Manager",
"version": {
"version_data": [
{
"version_affected": "\u003c=",
"version_value": "2.5.1"
}
]
}
}
]
},
"vendor_name": "Weidm\u00fcller"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Reported by a customer of the fdtCONTAINER component. Coordinated by CERT@VDE"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-502 Deserialization of Untrusted Data"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-038",
"refsource": "CONFIRM",
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05",
"refsource": "MISC",
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
]
},
"solution": [
{
"lang": "eng",
"value": "M\u0026M Software provides two updated fdtCONTAINER component trees (3.6.20304.x \u003c 3.7 and \u003e= 3.7) see advisory https://cert.vde.com/en-us/advisories/vde-2020-048 for details."
}
],
"source": {
"advisory": "VDE-2020-048",
"defect": [
"VDE-2020-048"
],
"discovery": "EXTERNAL"
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:emerson:rosemount_transmitter_interface_software:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:pepperl-fuchs:pactware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "5.0.5.31",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:dtminspector_3:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "4.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.5.20304",
"versionStartIncluding": "4.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_application:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "4.6.20304",
"versionStartIncluding": "4.6.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "3.5",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.5.20304",
"versionStartIncluding": "3.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:wago:fdtcontainer_component:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "3.6.20304",
"versionStartIncluding": "3.6.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:weidmueller:wi_manager:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.5.1",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:pepperl-fuchs:io-link_master_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "1.5.48",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-eip:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_4-pnio:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-eip-l:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_8-pnio-l:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-p:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-eip-t:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-p:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
},
{
"cpe23Uri": "cpe:2.3:h:pepperl-fuchs:io-link_master_dr-8-pnio-t:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "info@cert.vde.com",
"ID": "CVE-2020-12525"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://cert.vde.com/en-us/advisories/vde-2020-038",
"refsource": "CONFIRM",
"tags": [
"Not Applicable",
"Third Party Advisory"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-038"
},
{
"name": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05",
"refsource": "MISC",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-021-05"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2022-02-10T17:57Z",
"publishedDate": "2021-01-22T19:15Z"
}
}
}
ICSA-21-021-05
Vulnerability from csaf_cisa - Published: 2021-01-21 00:00 - Updated: 2021-06-17 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
fdtCONTAINER: Versions between 4.6.0 and 4.6.20304.x
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
>= 4.6.0 | =< 4.6.20304.x |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
dtmINSPECTOR: Version 3 (Based on FDT 1.2.x)
M&M Software GmbH, WAGO Kontakttechnik / dtmINSPECTOR
|
3 (Based on FDT 1.2.x) |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
fdtCONTAINER: Versions between 3.5.0 and 3.5.20304.x
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
>= 3.5.0 | =< 3.5.20304.x |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
fdtCONTAINER: Versions between 4.5.0 and 4.5.20304.x
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
>= 4.5.0 | =< 3.5.20304.x |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
Weidmüller WI Manager: up to and including Version 2.5.1
M&M Software GmbH, WAGO Kontakttechnik / Weidmüller WI Manager
|
<= 2.5.1 |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
Mitsubishi Electric MELSOFT FieldDeviceConfigurator: Versions 1.05 F and prior
M&M Software GmbH, WAGO Kontakttechnik / Mitsubishi Electric MELSOFT FieldDeviceConfigurator
|
<= 1.05 F |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
fdtCONTAINER: Versions older than 3.5
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
< 3.5 |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
fdtCONTAINER: Versions between 3.6.0 and 3.6.20304.x
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
>= 3.6.0 | <= 3.6.20304.x |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
PEPPERL+FUCHS PACTware: 5.0 up to and including Version 5.0.5.31
M&M Software GmbH, WAGO Kontakttechnik / PEPPERL+FUCHS PACTware
|
=> 5.0 | <= 5.0.5.31 |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
Emerson Rosemount Transmitter Interface Software (RTIS) SKUs: 04088-9000-0001 4088-9000-0002 and 7000003-312
M&M Software GmbH, WAGO Kontakttechnik / Emerson Rosemount Transmitter Interface Software (RTIS) SKUs
|
04088-9000-0001 | 4088-9000-0002 | 7000003-312 |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
|
|
fdtCONTAINER: Versions older than 4.5
M&M Software GmbH, WAGO Kontakttechnik / fdtCONTAINER
|
< 4.5 |
Vendor Fix
Vendor Fix
Mitigation
fix
Mitigation
Mitigation
Mitigation
Mitigation
Mitigation
fix
|
{
"document": {
"acknowledgments": [
{
"organization": "Emerson",
"summary": "reporting this vulnerability to CISA and M\u0026M Software"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "If an attacker can socially engineer a valid user into loading a manipulated project file, malicious code can be executed without notice.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Commercial Facilities, Critical Manufacturing, Energy, Transportation Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take the following measures to protect themselves from social engineering attacks:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\nCISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "No known public exploits specifically target this vulnerability. This vulnerability is not exploitable remotely.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-21-021-05 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-021-05.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-21-021-05 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-021-05"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ncas/tips/ST04-014"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "WAGO M\u0026M Software fdtCONTAINER (Update C)",
"tracking": {
"current_release_date": "2021-06-17T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-21-021-05",
"initial_release_date": "2021-01-21T00:00:00.000000Z",
"revision_history": [
{
"date": "2021-01-21T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "ICSA-21-021-05 WAGO M\u0026M Software fdtCONTAINER"
},
{
"date": "2021-02-04T00:00:00.000000Z",
"legacy_version": "A",
"number": "2",
"summary": "ICSA-21-021-05 WAGO M-M Software fdtCONTAINER (Update A)"
},
{
"date": "2021-02-16T00:00:00.000000Z",
"legacy_version": "B",
"number": "3",
"summary": "ICSA-21-021-05 WAGO M\u0026M Software fdtCONTAINER (Update B)"
},
{
"date": "2021-06-17T00:00:00.000000Z",
"legacy_version": "C",
"number": "4",
"summary": "ICSA-21-021-05 WAGO M\u0026M Software fdtCONTAINER (Update C)"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e= 4.6.0 | =\u003c 4.6.20304.x",
"product": {
"name": "fdtCONTAINER: Versions between 4.6.0 and 4.6.20304.x",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
},
{
"branches": [
{
"category": "product_version",
"name": "3 (Based on FDT 1.2.x)",
"product": {
"name": "dtmINSPECTOR: Version 3 (Based on FDT 1.2.x)",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "dtmINSPECTOR"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e= 3.5.0 | =\u003c 3.5.20304.x",
"product": {
"name": "fdtCONTAINER: Versions between 3.5.0 and 3.5.20304.x",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e= 4.5.0 | =\u003c 3.5.20304.x",
"product": {
"name": "fdtCONTAINER: Versions between 4.5.0 and 4.5.20304.x",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 2.5.1",
"product": {
"name": "Weidm\u00c3\u00bcller WI Manager: up to and including Version 2.5.1",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "Weidm\u00c3\u00bcller WI Manager"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 1.05 F",
"product": {
"name": "Mitsubishi Electric MELSOFT FieldDeviceConfigurator: Versions 1.05 F and prior",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "Mitsubishi Electric MELSOFT FieldDeviceConfigurator"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 3.5",
"product": {
"name": "fdtCONTAINER: Versions older than 3.5",
"product_id": "CSAFPID-0007"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003e= 3.6.0 | \u003c= 3.6.20304.x",
"product": {
"name": "fdtCONTAINER: Versions between 3.6.0 and 3.6.20304.x",
"product_id": "CSAFPID-0008"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
},
{
"branches": [
{
"category": "product_version_range",
"name": "=\u003e 5.0 | \u003c= 5.0.5.31",
"product": {
"name": "PEPPERL+FUCHS PACTware: 5.0 up to and including Version 5.0.5.31",
"product_id": "CSAFPID-0009"
}
}
],
"category": "product_name",
"name": "PEPPERL+FUCHS PACTware"
},
{
"branches": [
{
"category": "product_version",
"name": "04088-9000-0001 | 4088-9000-0002 | 7000003-312",
"product": {
"name": "Emerson Rosemount Transmitter Interface Software (RTIS) SKUs: 04088-9000-0001 4088-9000-0002 and 7000003-312",
"product_id": "CSAFPID-00010"
}
}
],
"category": "product_name",
"name": "Emerson Rosemount Transmitter Interface Software (RTIS) SKUs"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 4.5",
"product": {
"name": "fdtCONTAINER: Versions older than 4.5",
"product_id": "CSAFPID-00011"
}
}
],
"category": "product_name",
"name": "fdtCONTAINER"
}
],
"category": "vendor",
"name": "M\u0026M Software GmbH, WAGO Kontakttechnik"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-12525",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability has been discovered in the fdtCONTAINER component issued by M\u0026M Software and used by other products, including RTIS and PACTware. An attacker could exploit this vulnerability on the workstation by supplying/providing a manipulated project file. If that manipulated project file is loaded, malicious code could be executed without notice.CVE-2020-12525 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
"references": [
{
"category": "external",
"summary": "nvd.nist.gov",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12525"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "Update the fdtCONTAINER component/fdtCONTAINER application to a version that provides a more secure deserialization of the project data. This version will still use a deprecated serialization technology but will fix the currently known attack vector and will be compatible with existing, non-manipulated project files.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "vendor_fix",
"details": "Update the fdtCONTAINER component/fdtCONTAINER application to a version (fdtCONTAINER component: 3.7 or newer, fdtCONTAINER application: 4.7 or newer) that provides a secure deserialization of the project data with an updated serialization technology. This will break the compatibility to existing, non-manipulated project files.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "mitigation",
"details": "The CERT@VDE advisory for M\u0026M Software also recommends the following mitigation practices:",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
],
"url": "https://cert.vde.com/en-us/advisories/vde-2020-048"
},
{
"category": "mitigation",
"details": "Exchange project data only via secure exchange services.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "mitigation",
"details": "Use appropriate means to protect the project storage from unauthorized manipulation.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "mitigation",
"details": "Do not open project data from an unknown source.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "mitigation",
"details": "Reduce the user rights of the host application to the necessary minimum.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
},
{
"category": "mitigation",
"details": "Emerson has published a notification (EMR.RMT20004.Rev3) for this vulnerability in RTIS. RTIS users should review this notification for additional information specific to RTIS. CERT@VDE has published an advisory (VDE-2021-001) for this vulnerability in PEPPERL+FUCHS PACTware. CERT@VDE has published an advisory (VDE-2021-002) for this vulnerability in Weidm\u00fcller FDT/DTM Software with WI Manager. Mitsubishi Electric has published advisory 2020-020 concerning the vulnerability in MELSOFT FieldDeviceConfigurator.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
],
"url": "https://www.emerson.com/documents/automation/emr-rmt20004-rev3-en-7259618.pdf"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006",
"CSAFPID-0007",
"CSAFPID-0008",
"CSAFPID-0009",
"CSAFPID-00010",
"CSAFPID-00011"
]
}
]
}
]
}
ICSA-21-194-02
Vulnerability from csaf_cisa - Published: 2021-07-13 00:00 - Updated: 2021-07-27 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)
Schneider Electric Software, LLC / EcoStruxure Process Expert
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: v15.0 SP1
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
15.0 SP1 |
Mitigation
fix
|
|
|
Modicon M340 CPU (part numbers BMXP34*): all versions
Schneider Electric Software, LLC / Modicon M340 CPU (part numbers BMXP34*)
|
vers:all/* |
Mitigation
fix
|
|
|
Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions
Schneider Electric Software, LLC / Modicon M580 CPU (part numbers BMEP* and BMEH*)
|
vers:all/* |
Mitigation
fix
|
|
|
SCADAPack RemoteConnect for x70: all versions
Schneider Electric Software, LLC / SCADAPack RemoteConnect for x70
|
vers:all/* |
Mitigation
fix
|
|
|
EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)
Schneider Electric Software, LLC / EcoStruxure Control Expert
|
< 15.0 SP1 |
Mitigation
fix
|
{
"document": {
"acknowledgments": [
{
"names": [
"Kai Wang"
],
"organization": "Fortinet\u0027s FortiGuard Labs",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Andrey Muravitsky"
],
"organization": "Kaspersky",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Gal Kauffman"
],
"organization": "Armis",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Nicholas Miles"
],
"organization": "Tenable",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Li Wei"
],
"organization": "Friday Lab - Bolean Tech",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Maxim Tumakov",
"Artem Zinenko"
],
"organization": "Kaspersky",
"summary": "reporting these vulnerabilities to Schneider Electric"
},
{
"names": [
"Kai Wang"
],
"organization": "Codesafe Team of Legendsec at Qi\u0027anxin Group",
"summary": "reporting these vulnerabilities to Schneider Electric"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities may allow arbitrary code execution and loss of confidentiality and integrity of the project file.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Commercial Facilities, Energy, Food and Agriculture, Government Facilities, Transportation Systems, Water and Wastewater Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "France",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Specifically, users should:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage onus-cert.cisa.gov. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage on us-cert.cisa.gov in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\nOrganizations observing any suspected malicious activity should follow their established internal procedures and report their findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "No known public exploits specifically target these vulnerabilities.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-21-194-02 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-194-02.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-21-194-02 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-194-02"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ncas/tips/ST04-014"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Schneider Electric Modicon Controllers and Software (Update A)",
"tracking": {
"current_release_date": "2021-07-27T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-21-194-02",
"initial_release_date": "2021-07-13T00:00:00.000000Z",
"revision_history": [
{
"date": "2021-07-13T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "ICSA-21-194-02 Schneider Electric SCADApack RTU, Modicon Controllers, and Software"
},
{
"date": "2021-07-27T00:00:00.000000Z",
"legacy_version": "A",
"number": "2",
"summary": "ICSA-21-194-02 Schneider Electric Modicon Controllers and Software (Update A)"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "vers:all/*",
"product": {
"name": "EcoStruxure Process Expert: all versions Including all versions of EcoStruxure Hybrid DCS (former name of EcoStruxure Process Expert)",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "EcoStruxure Process Expert"
},
{
"branches": [
{
"category": "product_version",
"name": "15.0 SP1",
"product": {
"name": "EcoStruxure Control Expert: v15.0 SP1",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "EcoStruxure Control Expert"
},
{
"branches": [
{
"category": "product_version",
"name": "vers:all/*",
"product": {
"name": "Modicon M340 CPU (part numbers BMXP34*): all versions",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "Modicon M340 CPU (part numbers BMXP34*)"
},
{
"branches": [
{
"category": "product_version",
"name": "vers:all/*",
"product": {
"name": "Modicon M580 CPU (part numbers BMEP* and BMEH*): all versions",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "Modicon M580 CPU (part numbers BMEP* and BMEH*)"
},
{
"branches": [
{
"category": "product_version",
"name": "vers:all/*",
"product": {
"name": "SCADAPack RemoteConnect for x70: all versions",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "SCADAPack RemoteConnect for x70"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 15.0 SP1",
"product": {
"name": "EcoStruxure Control Expert: all versions prior to v15.0 SP1 Including all versions of Unity Pro (former name of EcoStruxure Control Expert)",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "EcoStruxure Control Expert"
}
],
"category": "vendor",
"name": "Schneider Electric Software, LLC"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-22778",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "An insufficiently protected credentials vulnerability exists that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file. CVE-2021-22778 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).. --------- Begin Update A Part 2 of 2 --------CVE-2021-22778 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22778"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2021-22779",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"notes": [
{
"category": "summary",
"text": "An authentication bypass by spoofing vulnerability exists that could cause unauthorized access in read and write mode to the controller by spoofing the Modbus communication between the engineering software and the controller. CVE-2021-22779 has been assigned to this vulnerability. A CVSS v3 base score of 9.8has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).. --------- End Update A Part 2 of 2 --------CVE-2021-22779 has been assigned to this vulnerability. A CVSS v3 base score of 9.8has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22779"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2020-12525",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "summary",
"text": "M\u0026M Software fdtCONTAINER component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.\nNote: This vulnerability could cause local code execution on the engineering workstation when a malicious project file is loaded into the engineering software.CVE-2020-12525 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H).\n",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12525"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2021-22780",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "An insufficiently protected credentials vulnerability exists that could cause unauthorized access to a project file protected by a password when this file is shared with untrusted sources. An attacker may bypass the password protection and be able to view and modify a project file.CVE-2021-22780 has been assigned to this vulnerability. A CVSS v3 base score of 7.1 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).\n",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22780"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2021-22781",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "An insufficiently protected credentials vulnerability exists that could cause a leak of SMTP credentials used for mailbox authentication when an attacker can access a project file.CVE-2021-22781 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22781"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2021-22782",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A missing encryption of sensitive data vulnerability exists that could cause an information leak allowing disclosure of network and process information, credentials, or intellectual property when an attacker can access a project file.CVE-2021-22782 has been assigned to this vulnerability. A CVSS v3 base score of 6.2 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22782"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"remediations": [
{
"category": "mitigation",
"details": "Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
}
]
}
SEVD-2020-252-01
Vulnerability from csaf_se - Published: 2020-09-08 00:00 - Updated: 2021-02-09 00:00M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x which is included in SCADAPack x70 is vulnerable to deserialization of untrusted data in its project storage
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Remote Connect V3.6.3.574 and prior
Schneider Electric / SCADAPack x70 Remote Connect
|
<=3.6.3.574 |
Vendor Fix
fix
Mitigation
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 RemoteConnect V3.7.3.904
Schneider Electric / SCADAPack x70 RemoteConnect
|
3.7.3.904 |
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory (‘Path Transversal’) vulnerability exists which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Remote Connect V3.6.3.574 and prior
Schneider Electric / SCADAPack x70 Remote Connect
|
<=3.6.3.574 |
Vendor Fix
fix
Mitigation
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 RemoteConnect V3.7.3.904
Schneider Electric / SCADAPack x70 RemoteConnect
|
3.7.3.904 |
A CWE-285 Improper Authorization vulnerability exists which allows improper access to executable code folders.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Remote Connect V3.6.3.574 and prior
Schneider Electric / SCADAPack x70 Remote Connect
|
<=3.6.3.574 |
Vendor Fix
fix
Mitigation
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 RemoteConnect V3.7.3.904
Schneider Electric / SCADAPack x70 RemoteConnect
|
3.7.3.904 |
A CWE-284 Improper Access Control vulnerability exists which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Remote Connect V3.6.3.574 and prior
Schneider Electric / SCADAPack x70 Remote Connect
|
<=3.6.3.574 |
Vendor Fix
fix
Mitigation
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 RemoteConnect V3.7.3.904
Schneider Electric / SCADAPack x70 RemoteConnect
|
3.7.3.904 |
A CWE-502 Deserialization of Untrusted Data vulnerability exists which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Security Administrator V1.2.0 and prior
Schneider Electric / SCADAPack x70 Security Administrator
|
<=1.2.0 |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Schneider Electric SCADAPack x70 Security Administrator V1.6.2
Schneider Electric / SCADAPack x70 Security Administrator
|
1.6.2 |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "We strongly recommend the following industry cybersecurity best practices.\n\nhttps://www.se.com/us/en/download/document/7EN52-0390/\n* Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network.\n* Install physical controls so no unauthorized personnel can access your industrial control and safety systems, components, peripheral equipment, and networks.\n* Place all controllers in locked cabinets and never leave them in the \u201cProgram\u201d mode.\n* Never connect programming software to any network other than the network intended for that device.\n* Scan all methods of mobile data exchange with the isolated network such as CDs, USB drives, etc. before use in the terminals or any node connected to these networks.\n* Never allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.\n* Minimize network exposure for all control system devices and systems and ensure that they are not accessible from the Internet.\n* When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). Recognize that VPNs may have vulnerabilities and should be updated to the most current version available. Also, understand that VPNs are only as secure as the connected devices.\nFor more information refer to the Schneider Electric Recommended Cybersecurity Best Practices document. \n",
"title": "General Security Recommendations"
},
{
"category": "general",
"text": "This document provides an overview of the identified vulnerability or vulnerabilities and actions required to mitigate. For more details and assistance on how to protect your installation, contact your local Schneider Electric representative or Schneider Electric Industrial Cybersecurity Services: https://www.se.com/ww/en/work/solutions/cybersecurity/. These organizations will be fully aware of this situation and can support you through the process.\nFor further information related to cybersecurity in Schneider Electric\u2019s products, visit the company\u2019s cybersecurity support portal page: https://www.se.com/ww/en/work/support/cybersecurity/overview.jsp",
"title": "For More Information"
},
{
"category": "legal_disclaimer",
"text": "THIS NOTIFICATION DOCUMENT, THE INFORMATION CONTAINED HEREIN, AND ANY MATERIALS LINKED FROM IT (COLLECTIVELY, THIS \u201cNOTIFICATION\u201d) ARE INTENDED TO HELP PROVIDE AN OVERVIEW OF THE IDENTIFIED SITUATION AND SUGGESTED MITIGATION ACTIONS, REMEDIATION, FIX, AND/OR GENERAL SECURITY RECOMMENDATIONS AND IS PROVIDED ON AN \u201cAS-IS\u201d BASIS WITHOUT WARRANTY OR GUARANTEE OF ANY KIND. SCHNEIDER ELECTRIC DISCLAIMS ALL WARRANTIES RELATING TO THIS NOTIFICATION, EITHER EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SCHNEIDER ELECTRIC MAKES NO WARRANTY THAT THE NOTIFICATION WILL RESOLVE THE IDENTIFIED SITUATION. IN NO EVENT SHALL SCHNEIDER ELECTRIC BE LIABLE FOR ANY DAMAGES OR LOSSES WHATSOEVER IN CONNECTION WITH THIS NOTIFICATION, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SCHNEIDER ELECTRIC HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. YOUR USE OF THIS NOTIFICATION IS AT YOUR OWN RISK, AND YOU ARE SOLELY LIABLE FOR ANY DAMAGES TO YOUR SYSTEMS OR ASSETS OR OTHER LOSSES THAT MAY RESULT FROM YOUR USE OF THIS NOTIFICATION. SCHNEIDER ELECTRIC RESERVES THE RIGHT TO UPDATE OR CHANGE THIS NOTIFICATION AT ANY TIME AND IN ITS SOLE DISCRETION",
"title": "LEGAL DISCLAIMER"
},
{
"category": "general",
"text": "At Schneider, we believe access to energy and digital is a basic human right. We empower all to do more with less, ensuring Life Is On everywhere, for everyone, at every moment.\n\nWe provide energy and automation digital solutions for efficiency and sustainability. We combine world-leading energy technologies, real-time automation, software and services into integrated solutions for Homes, Buildings, Data Centers, Infrastructure and Industries.\n\nWe are committed to unleash the infinite possibilities of an open, global, innovative community that is passionate with our Meaningful Purpose, Inclusive and Empowered values.\n\nwww.se.com ",
"title": "About Schneider Electric"
},
{
"category": "summary",
"text": "Schneider Electric is aware of multiple vulnerabilities in the SCADAPack x70 Remote Connect\r\nand the SCADAPack x70 Security Administrator applications.",
"title": "Overview"
}
],
"publisher": {
"category": "vendor",
"contact_details": "cpcert@se.com",
"name": "Schneider Electric CPCERT",
"namespace": "https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp"
},
"references": [
{
"category": "self",
"summary": "SCADAPack x70 Remote Connect and - SEVD-2020-252-01 PDF Version",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-252-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2020-252-01_SCADAPack_RemoteConnect_and_Security_Administrator%20V1.2.pdf"
},
{
"category": "self",
"summary": "SCADAPack x70 Remote Connect and - SEVD-2020-252-01 CSAF Version",
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-252-01\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=sevd-2020-252-01.json"
},
{
"category": "external",
"summary": "Recommended Cybersecurity Best Practices",
"url": "https://www.se.com/us/en/download/document/7EN52-0390/"
}
],
"title": "SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator",
"tracking": {
"current_release_date": "2021-02-09T00:00:00.000Z",
"generator": {
"date": "2021-02-09T00:00:00.000Z",
"engine": {
"name": "Schneider Electric CSAF Generator",
"version": "1.2"
}
},
"id": "SEVD-2020-252-01",
"initial_release_date": "2020-09-08T00:00:00.000Z",
"revision_history": [
{
"date": "2020-09-08T00:00:00.000Z",
"number": "1.0.0",
"summary": "Original Release"
},
{
"date": "2020-10-13T00:00:00.000Z",
"number": "1.1.0",
"summary": "Corrected fix version of RemoteConnect from\r\nV2.3.2 to V2.4.2 package (page 2)."
},
{
"date": "2021-02-09T00:00:00.000Z",
"number": "1.2.0",
"summary": "Replaced CVE-2020-7528 with the pre-existing \r\nCVE-2020-12525 assigned to M\u0026M Software, \r\neliminating the duplicate entry for the same \r\nvulnerability.(page 1)."
}
],
"status": "final",
"version": "1.2.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=3.6.3.574",
"product": {
"name": "Schneider Electric SCADAPack x70 Remote Connect V3.6.3.574 and prior",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SCADAPack x70 Remote Connect"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c=1.2.0",
"product": {
"name": "Schneider Electric SCADAPack x70 Security Administrator V1.2.0 and prior",
"product_id": "2"
}
}
],
"category": "product_name",
"name": "SCADAPack x70 Security Administrator"
},
{
"branches": [
{
"category": "product_version",
"name": "3.7.3.904",
"product": {
"name": "Schneider Electric SCADAPack x70 RemoteConnect V3.7.3.904",
"product_id": "3"
}
}
],
"category": "product_name",
"name": "SCADAPack x70 RemoteConnect"
},
{
"branches": [
{
"category": "product_version",
"name": "1.6.2",
"product": {
"name": "Schneider Electric SCADAPack x70 Security Administrator V1.6.2",
"product_id": "4"
}
}
],
"category": "product_name",
"name": "SCADAPack x70 Security Administrator"
}
],
"category": "vendor",
"name": "Schneider Electric"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-12525",
"notes": [
{
"category": "description",
"text": "M\u0026M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and \r\n3.6.20304.x which is included in SCADAPack x70 is vulnerable to deserialization of untrusted \r\ndata in its project storage",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"3"
],
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "For SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator these \r\nvulnerabilities are fixed in SCADAPack x70 RemoteConnect V3.7.3.904 and SCADAPack x70 \r\nSecurity Administrator V1.6.2 respectively and are available for download in the link below, as \r\npart of the RemoteConnect V2.4.2 package: \r\nhttps://shop.exchange.se.com/en-US/apps/58663\r\nThere is no need to reboot.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
},
"url": "https://shop.exchange.se.com/en-US/apps/58663"
},
{
"category": "mitigation",
"details": "The following workarounds and mitigations can be applied by customers to reduce the risk: Educate users to screen files from external sources and avoid files from untrusted sources before opening them in RemoteConnect or Security Administrator.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
}
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.3,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.3,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-12525 "
},
{
"acknowledgments": [
{
"names": [
"Amir Preminger"
],
"organization": "Claroty"
}
],
"cve": "CVE-2020-7529",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "description",
"text": "A CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u2018Path Transversal\u2019) \r\nvulnerability exists which allows an attacker to place content in any unprotected folder on the \r\ntarget system using a crafted .RCZ file.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"3"
],
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "For SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator these \r\nvulnerabilities are fixed in SCADAPack x70 RemoteConnect V3.7.3.904 and SCADAPack x70 \r\nSecurity Administrator V1.6.2 respectively and are available for download in the link below, as \r\npart of the RemoteConnect V2.4.2 package: \r\nhttps://shop.exchange.se.com/en-US/apps/58663\r\nThere is no need to reboot.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
},
"url": "https://shop.exchange.se.com/en-US/apps/58663"
},
{
"category": "mitigation",
"details": "The following workarounds and mitigations can be applied by customers to reduce the risk: Educate users to screen files from external sources and avoid files from untrusted sources before opening them in RemoteConnect or Security Administrator.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
}
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalScore": 5.5,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 5.5,
"temporalSeverity": "MEDIUM",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-7529"
},
{
"acknowledgments": [
{
"names": [
"Amir Preminger"
],
"organization": "Claroty"
}
],
"cve": "CVE-2020-7530",
"cwe": {
"id": "CWE-285",
"name": "Improper Authorization"
},
"notes": [
{
"category": "description",
"text": "A CWE-285 Improper Authorization vulnerability exists which allows improper access to \r\nexecutable code folders.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"3"
],
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "For SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator these \r\nvulnerabilities are fixed in SCADAPack x70 RemoteConnect V3.7.3.904 and SCADAPack x70 \r\nSecurity Administrator V1.6.2 respectively and are available for download in the link below, as \r\npart of the RemoteConnect V2.4.2 package: \r\nhttps://shop.exchange.se.com/en-US/apps/58663\r\nThere is no need to reboot.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
},
"url": "https://shop.exchange.se.com/en-US/apps/58663"
},
{
"category": "mitigation",
"details": "The following workarounds and mitigations can be applied by customers to reduce the risk: Educate users to screen files from external sources and avoid files from untrusted sources before opening them in RemoteConnect or Security Administrator.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
}
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"environmentalScore": 7.1,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.0"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-7530"
},
{
"acknowledgments": [
{
"names": [
"Amir Preminger"
],
"organization": "Claroty"
}
],
"cve": "CVE-2020-7531",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "description",
"text": "A CWE-284 Improper Access Control vulnerability exists which allows an attacker to place \r\nexecutables in a specific folder and run code whenever RemoteConnect is executed by the \r\nuser.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"3"
],
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "For SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator these \r\nvulnerabilities are fixed in SCADAPack x70 RemoteConnect V3.7.3.904 and SCADAPack x70 \r\nSecurity Administrator V1.6.2 respectively and are available for download in the link below, as \r\npart of the RemoteConnect V2.4.2 package: \r\nhttps://shop.exchange.se.com/en-US/apps/58663\r\nThere is no need to reboot.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
},
"url": "https://shop.exchange.se.com/en-US/apps/58663"
},
{
"category": "mitigation",
"details": "The following workarounds and mitigations can be applied by customers to reduce the risk: Educate users to screen files from external sources and avoid files from untrusted sources before opening them in RemoteConnect or Security Administrator.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
}
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalScore": 6,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 6,
"temporalSeverity": "MEDIUM",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H",
"version": "3.0"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-7531"
},
{
"acknowledgments": [
{
"names": [
"Amir Preminger"
],
"organization": "Claroty"
}
],
"cve": "CVE-2020-7532",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "description",
"text": "A CWE-502 Deserialization of Untrusted Data vulnerability exists which could allow arbitrary \r\ncode execution when an attacker builds a custom .SDB file containing a malicious serialized \r\nbuffer.",
"title": "CVE Description"
}
],
"product_status": {
"fixed": [
"4"
],
"known_affected": [
"2"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "For SCADAPack x70 Remote Connect and SCADAPack x70 Security Administrator these \r\nvulnerabilities are fixed in SCADAPack x70 RemoteConnect V3.7.3.904 and SCADAPack x70 \r\nSecurity Administrator V1.6.2 respectively and are available for download in the link below, as \r\npart of the RemoteConnect V2.4.2 package: \r\nhttps://shop.exchange.se.com/en-US/apps/58663\r\nThere is no need to reboot.",
"product_ids": [
"2"
],
"restart_required": {
"category": "none"
},
"url": "https://shop.exchange.se.com/en-US/apps/58663"
},
{
"category": "mitigation",
"details": "The following workarounds and mitigations can be applied by customers to reduce the risk: Educate users to screen files from external sources and avoid files from untrusted sources before opening them in RemoteConnect or Security Administrator.",
"product_ids": [
"1"
],
"restart_required": {
"category": "none"
}
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"2"
]
}
],
"title": "CVE-2020-7532"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.