This week we have nine vendor disclosures from Aruba Networks, GE Gas Power (3), HP, Meinberg, Moxa, Philips, and WatchGuard. We also have eight vendor updates from Broadcom (2), Eaton, and HPE (5). Finally, we have five researcher reports for vulnerabilities in products from Insyde (3) and WellinTech (2).
Aruba Advisory
Aruba published an advisory that describes a remote code execution vulnerability in their CX Switches. The vulnerability was reported by Daniel Jensen. Aruba has new versions that mitigate the vulnerability. There is no indication that Jensen has been provided an opportunity to verify the efficacy of the fix.
GE Advisories
GE published an advisory that discusses unnamed security issues with the Woodward MicroNet Plus 5200 CPU. GE recommends upgrading your system to a modern MicroNet Plus CPU.
GE published an advisory that describes a deserialization vulnerability in their ToolboxST product. The vulnerability was reported by Sharon Brizinov of Claroty. GE has new versions that mitigate the vulnerability. There is no indication that Sharon has been provide an opportunity to verify the efficacy of the fix.
GE published an advisory that discusses a buffer underwrite vulnerability in the FortiGuard FortiOS that affects the GE NetworkST4, Remote Operations Offering, and M&D Lockbox and S3C Firewall (60F) products. GE recommends installing the FortiOs firmware update.
HP Advisory
HP published an advisory that discusses 16 time-of-check to time-of-use (TOC TOU) vulnerability in a variety of their products. These are third-party (Insyde) vulnerabilities. HP has SoftPaqs that deal with the vulnerabilities.
Meinberg Advisory
Meinberg published an advisory that discusses eleven vulnerabilities in their LANTIME product. These are third-party vulnerabilities. Meinberg has a new firmware version that mitigates the vulnerabilities.
The eleven reported vulnerabilities are:
Cleartext transmission of sensitive information (3) - CVE-2022-43551 (exploit), CVE-2023-23914 (exploit), and CVE-2023-23915 (exploit),
Use after free (3) - CVE-2022-43552 (exploit), CVE-2023-0215, and CVE-2022-43680 (with POC),
Allocation of resources without limit or throttling - CVE-2023-23916 (exploit),
Type confusion (2) - CVE-2023-0286 and CVE-2023-0286,
TOC TOU - CVE-2022-4304, and
Improper privilege management - CVE-2023-22809 (with POC)
Moxa Advisory
Moxa published an advisory that discusses two TCG TPM2.0 implementation vulnerabilities. Moxa reports that none of their products are affected.
Philips Advisory
Philips published an advisory that discusses two remote code execution vulnerabilities. These are third-party (Microsoft) vulnerabilities. Philips provides a list of affected products. They note that Microsoft included fixes for these vulnerabilities in their March security update.
WatchGuard Advisory
WatchGuard published an advisory that discusses an OpenSSH double free vulnerability. WatchGuard notes that their Firebox and Dimension products use a different version of OpenSSH and are not affected by the vulnerability.
Broadcom Updates
Broadcom published an update for their AMI MegaRAC Baseboard Management Controller that was originally published on December 9th, 2022. The new information includes a note that, while the vulnerability does not affect their SANnav products, owners should apply the vendor recommendations anyway.
Broadcom published an update for their ksmb module in the Linux kernel advisory that was originally published on December 24th, 2022. The new information includes a note that, while the vulnerability does not affect Broadcom Manageability products, owners should apply the vendor recommendations anyway.
Eaton Update
Eaton published an update for their Ripple20 advisory that was originally published on June 23rd, 2020 and most recently updated on November 11th, 2020. The new information includes updates for the Modbus-MS Card.
HPE Updates
HPE published an update for their ProLiant BL/DL/ML Servers advisory that was originally published on February 14th, 2023. The new information includes adding their Gen9 platforms.
HPE published an update for their Aruba ClearPass Policy Manager advisory that was originally published on March 15th, 2023. The new information includes updating the discovery information for CVE-2023-25594.
HPE published an update for their StoreEasy Servers advisory that was originally published on February 14th, 2023. The new information includes adding their Gen9 servers.
HPE published an update for their Synergy Servers advisory that was originally published on February 14th, 2023. The new information includes adding their Gen9 servers.
HPE published an update for their Proliant DX Servers advisory that was originally published on February 14th, 2023. The new information includes adding their Gen9 servers.
Insyde Reports
BINARLY published three reports about vulnerabilities in the InsydeH2O products. The BINARLY reports include proof-of-concept code. The vulnerabilities were previously reported by Insyde.
The three reported vulnerabilities are:
Stack-based buffer overflow - CVE-2022-36337, CVE-2022-35407, and CVE-2022-35897
WellinTech Reports
Cisco Talos published two reports about vulnerabilities in the WellinTech KingHistorian. The reports include proof-of-concept code. These are coordinated disclosures and WellinTech has new versions that mitigate the vulnerabilities.
The two reported vulnerabilities are:
Exposure of sensitive information to an unauthorized actor - CVE-2022-45124, and
Incorrect type conversion or cast - CVE-2022-43663