This week we have five PrintNightmare disclosures from Boston Scientific, Carestream, PEPPERL+FUCHS, Draeger, and Spacelabs Healthcare. There were four other vendor disclosures from CODESYS. We also have two updates from CODESYS.
PrintNightmare Advisories
Boston Scientific published an advisory discussing the PrintNightmare vulnerabilities. They report that they are working to determine if any of their products are affected.
Carestream published an advisory discussing the PrintNightmare vulnerabilities. They provide a list of affected and unaffected products. Company is still working on qualifying MS patch.
CERT-VDE published an advisory discussing the PrintNightmare vulnerabilities in products from PEPPERL+FUCHS. The advisory provides a list of affected products and mitigation measures.
Draeger published an advisory discussing the PrintNightmare vulnerabilities. They provide a list of affected products and mitigation measures.
Spacelabs published an advisory discussing the PrintNightmare vulnerabilities. They provide a list of affected and unaffected products and recommend applying the appropriate MS patch.
CODESYS Advisories
CODESYS published an advisory describing a files or directories accessible to external parties vulnerability in their CODESYS V3 web server. The vulnerability was reported by Witali Rempel of Eaton Industries GmbH. CODESYS has a new version that mitigates the vulnerability. There is no indication that Rempel has been provided an opportunity to verify the efficacy of the fix.
CODESYS published an advisory describing a null pointer dereference vulnerability in their CODESYS Gateway V3. The vulnerability was reported by Denis Goryushev of Positive Technologies. CODESYS has a new version that mitigates the vulnerability. There is no indication that Goryushev has been provided an opportunity to verify the efficacy of the fix.
CODESYS published an advisory describing seven vulnerabilities in their CODESYS Development System V3. The vulnerabilities reported by Patrick DeSantis of Cisco Talos (see links below). The reports contain proof-of-concept code. CODESYS has a new version that mitigates the vulnerabilities. There is no indication that DeSantis has been provided an opportunity to verify the efficacy of the fix.
The seven reported vulnerabilities are:
Deserialization of untrusted data (7) - CVE-2021-21863, CVE-2021-21864, CVE-2021-21865, CVE-2021-21866,CVE-2021-21867, CVE-2021-21868, and CVE-2021-21869.
CODESYS published an advisory describing a null pointer dereference vulnerability in their CODESYS EtherNetIP. CODESYS has a new version that mitigates the vulnerability.
NOTE: CODESYS is using CVE-2021-36765 which was included in the advisory described above, so the proof-of-concept code provided in the Cisco Talos report may work here as well.
CODESYS Updates
CODESYS published an update for their CODESYS V3 web server advisory that was originally published on May 19th, 2021. The new information includes adding a second fixed version for some of the previously fixed products.
CODESYS published an update for their CODESYS V3 Runtime Toolkit for VxWorks advisory that was originally published on May 19th, 2021. The new information includes adding a second fixed version for some of the previously fixed products.