Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems

Here's a summary of the provided document:

Summary:

Vulnerability Report:

Vendor: Siemens
Affected Products: Cerberus PRO UL and Desigo Fire Safety UL products
Vulnerabilities: Classic Buffer Overflow, Out-of-bounds Read, Improper Restriction of Operations within the Bounds of a Memory Buffer
Risk Evaluation: Successful exploitation can allow an unauthenticated attacker to execute arbitrary code or create a denial-of-service condition, potentially leading to a denial-of-service in the fire protection system network.

Mitigations:

Update to the latest versions of the affected products
Implement secure network access controls, such as firewalls and VPNs
Regularly update and patch network devices and systems

Recommendations:

Perform proper impact analysis and risk assessment prior to deploying defensive measures
Implement recommended cybersecurity strategies for proactive defense of ICS assets
Follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.