Rewterz Threat Advisory – ICS: Multiple Siemens Products Vulnerabilities

Rewterz Threat Alert – AveMaria RAT aka WarzoneRAT – Active IOCs

February 19, 2024

Rewterz Threat Advisory – Multiple F5 Products Vulnerabilities

February 19, 2024

Rewterz Threat Advisory – ICS: Multiple Siemens Products Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2024-22043 CVSS:3.3

Siemens Parasolid is vulnerable to a denial of service, caused by a NULL pointer dereference vulnerability. By parsing specially crafted XT files, a local attacker could exploit this vulnerability to cause a denial of service.

CVE-2024-22042 CVSS:7.8

Siemens Unicam FX could allow a local authenticated attacker to gain elevated privileges on the system, caused by incorrect use of privileged APIs. By sending a specially crafted request, an attacker could exploit this vulnerability to escalate privileges.

CVE-2023-49125 CVSS:7.8

Siemens Parasolid could allow a local attacker to execute arbitrary code on the system, caused by an out-of-bounds read flaw. By parsing a specially crafted files containing XT format, an attacker could exploit this vulnerability to execute code in the context of the current process.

CVE-2023-51440 CVSS:7.5

Siemens CP343-1 Devices are vulnerable to a denial of service, caused by improper validation of TCP sequence numbers. By injecting spoofed TCP RST packets, a remote attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2023-48364 CVSS:6.5

Siemens SIMATIC WinCC and OpenPCS are vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the implementation of the RPC. By sending specially crafted RPC messages, a remote attacker could exploit this vulnerability to cause a denial of service condition in the RPC server.

CVE-2023-48363 CVSS:6.5

CVE-2023-50236 CVSS:7.8

Siemens Polarion ALM could allow a local authenticated attacker to gain elevated privileges on the system, caused by a weak file and folder permissions in the installation path. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to gain elevated privileges to NT AUTHORITY\SYSTEM.