Public ICS Disclosures – Week of 1-11-25 - Part 3

For Part 3 we have one additional advisory for products from Siemens. We also have 17 vendor updates from Siemens. There are two researcher reports for vulnerabilities in products from Offis. Finally we have three exploits for products from ABB and Palo Alto Networks (2)

Siemens Advisory

Siemens published an advisory that discusses an insertion of sensitive information into a log file vulnerability in their Siveillance Video Device Pack. This is a third-party (Milestone) vulnerability. Siemens has a new version that mitigates the vulnerability.

Siemens Updates

Siemens published an update for their User Management Component advisory that was originally published on December 12^th, 2023, and most recently updated on October 8^th, 2024. The new information includes clarifying that no more fixes are planned for Totally Integrated Automation Portal (TIA Portal) V16.

Siemens published an update for their SIMATIC S7-1500 advisory that was originally published on October 8^th, 2024, and most recently updated on December 10^th, 2024. The new information includes adding remediation for SIMATIC S7-PLCSIM Advanced.

Siemens published an update for their Siemens Engineering Platform advisory that was originally published on November 12^th, 2024. The new information includes clarifying that no fix planned for Totally Integrated Automation Portal (TIA Portal) V16.

Siemens published an update for their Socket.IO advisory that was originally published on September 10^th, 2024, and most recently updated on December 10^th, 2024. The new information includes adding fix releases for SIMATIC PCS neo V5.0.

Siemens published an update for their SIMATIC WinCC advisory that was originally published on April 9^th, 2024, and most recently updated on July 9^th, 2024. The new information includes adding fix fix for SIMATIC WinCC Runtime Professional V17.

Siemens published an update for their BlastRadius.Fail advisory that was originally published on July 9^th, 2024, and most recently updated on December 10^th, 2024. The new information includes adding fix for SCALANCE W-700 IEEE 802.11ax family, and for SCALANCE M-800 family (incl. S615, MUM-800 and RM1224).

Siemens published an update for their e OPC UA Implementations advisory that was originally published on September 12^th, 2023, and most recently updated on December 10^th, 2025. The new information includes adding fix for SIMATIC NET PC Software V16.

Siemens published an update for their SCALANCE W-700 advisory that was originally published on June 11^th, 2024, and most recently updated on September 10^th, 2024. The new information includes:

• Adding fix for CVE-2023-44317, CVE-2023-44319, CVE-2024-44374,

• Adding CVSSv4 vectors for all CVE IDs,

• Removing CVE-2022-46144 as this is addressed in SSA-413565 and was fixed in V2.0.0

Siemens published an update for their SIMATIC SCADA and PCS 7 systems advisory that was originally published on September 10^th, 2024, and most recently updated on November 12^th, 2024. The new information includes adding fix information for SIMATIC Information Server 2022 and SIMATIC Process Historian 2022.

Siemens published an update for their SegmentSmack advisory that was originally published on April 14^th, 2020, and most recently updated on July 9^th, 2024. The new information includes adding d fix for SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) and SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0).

Siemens published an update for their S7-1500 CPU devices advisory that was originally published on January 10^th, 2023, and most recently updated on June 11^th, 2024. The new information includes adding information about additional new S7-1500 hardware versions.

Siemens published an update for their PROFINET Stack advisory that was originally published on April 12^th, 2022, and most recently updated on July 9^th, 2024. The new information includes adding fix for SIMATIC ET200ecoPN, CM 4x IO-Link, M12-L (6ES7148-6JE00-0BB0), SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JG00-0BB0) and SIMATIC ET200ecoPN, CM 8x IO-Link, M12-L (6ES7148-6JJ00-0BB0).

Siemens published an update for their SCALANCE products advisory that was originally published on December 13^th, 2022, and most recently updated on October 10^th, 2023. The new information for SCALANCE W-700 IEEE 802.11ax family includes:

• Adding fix for CVE-2022-34821,

• Correcting fix for CVE-2022-46143, and

• Clarifying that the devices were also affected by CVE-2022-46144 with fix in V2.0.0,

Siemens published an update for their Mendix Runtime advisory that was originally published on September 10^th, 2024, and most recently updated on December 12^th, 2024. The new information includes:

• Adding complete fix for Mendix Runtime V10.12 and V10.6, and

• Removed hint about additional required actions in former (incomplete) fix versions

Siemens published an update for their GNU/Linux subsystem advisory that was originally published on December 12^th, 2023, and most recently updated on December 10^th, 2024. The new information includes adding CVE-2024-11053 (exploit).

Siemens published an update for their Web Server of SIMATIC S7-1500 CPUs advisory that was originally published on October 8^th, 2024, and most recently updated on November 12^th, 2024. The new information includes adding remediation for SIMATIC S7-PLCSIM Advanced.

Siemens published an update for their User Management Component advisory that was originally published on September 10^th, 2024, and most recently updated on November 12^th, 2024. The new information includes:

• Adding fix for SIMATIC PCS neo V5.0,

• Removing SIMATIC Information Server 2022 and SIMATIC Information Server 2024 as not affected

Offis Reports

Cisco Talos published a report that describes an improper restriction of operations within the bounds of a memory buffer in the Offis DCMTK DICOM library. The report includes proof-of-concept code. This is a coordinated disclosure and Offis has a new version that mitigates the vulnerability.

Cisco Talos published a report that describes an improper restriction of operations within the bounds of a memory buffer in the Offis DCMTK DICOM library. The report includes proof-of-concept code. This is a coordinated disclosure and Offis has a new version that mitigates the vulnerability.

ABB Exploit

Cyber Danube published an exploit for two vulnerabilities in the ABB AC500v3. The vulnerabilities were previously reported by ABB. Cyber Danube previously published a report about those vulnerabilities.

Palo Alto Networks Exploits

An unidentified researcher published an exploit for an improper check for unusual or exceptional conditions vulnerability (reported in the CISA Known Exploited Vulnerabilities catalog) in the Palo Alto Networks PanOS product. Palo Alto Networks previously disclosed the vulnerability.

SSD published an advisory for an OS command injection vulnerability in the Palo Alto Networks Expedition Migration Tool. The vulnerability was previously disclosed by Palo Alto Networks.