ICSA-19-134-07 Siemens SCALANCE W1750D

Vulnerabilities 5

• Unscored —
  CVE-2018-16417

  Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11, 8.3.x prior to 8.3.0.6, and 8.4.x prior to 8.4.0.…

  Oct 30, 2019
• Unscored —
  CVE-2018-7064

  A reflected cross-site scripting (XSS) vulnerability is present in an unauthenticated Aruba Instant web interface. An a…

  May 10, 2019
• Unscored —
  CVE-2018-7082

  A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to exec…

  May 10, 2019
• Unscored —
  CVE-2018-7083

  If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory content…

  May 10, 2019
• Unscored —
  CVE-2018-7084

  A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web …

  May 10, 2019

Revision history

1. 2019-05-14 #1

   Publication Date

References

• SSA-549547: Multiple Vulnerabilites in SCALANCE W1750D
  https://cert-portal.siemens.com/productcert/txt/ssa-549547.txt
• ICSA Advisory ICSA-19-134-07 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-19-134-07
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B