Target Industry

No specific sector has been identified for targeting.

Overview

Severity level: Medium to High.

Cisco has released twenty one advisories within the past seven days, each of them affecting different Cisco tools and products. Additionally, the US institution, the Cyber Security and Infrastructure Security Agency (CISA), has recently released an additional twenty advisories affecting industrial control systems.

Impact

Customers using systems from either Cisco, Siemens or Omron may be at risk from multiple vulnerabilities that can provide threat actors with initial access to systems containing private data.

Vulnerability Detection

Both the Cisco and CISA advisory reports contain significant detection information. Systems running older versions to the ones stated in the reports are vulnerable.

Advisory reports can be found below.

Affected Products

Cisco:

– Cisco Adaptive Security Appliance (ASA) Software
– Cisco Firepower Threat Defence (FTD)
– Cisco Next Generation Intrusion Prevention System (NGIPS)
– Cisco Firepower Management Center (FMC)
– Cisco FXOS Software
– Cisco Email Security Appliance (ESA)

Siemens:

– Parasolid
– SIMATIC Drive Controller Family
– SINEC Network Management
– SINUMERIK ONE & SINUMERIK MC
– RUGGEDCOM ROS
– QMS Automotive
– Teamcenter Visualisation and JT2GO
– SCALANCE W1750D
– SICAM Q100
– CAPITAL VSTAR
– SCALANCE X-200 and X-200IRT Families
– Mendix SAML Module
– SCALANCE and RUGGEDCOM Products
– Questa and ModelSim

Omron:

– NJNX-series Machine Automation Controllers
– NJNX-series

Delta:

– DIAenergy

Containment, Mitigations & Remediations

Customers are strongly advised to update all affected systems to the latest patching level to remove vulnerabilities.

Full and detailed mitigations can be found in the Cisco and CISA reports below.

Indicators of Compromise

No indicators of compromise have been released.

Further Information

Cisco Advisories
CISA Advisories