Siemens OZW Web Server
view advisory published 2020-02-11
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13941US | high7.5 | — | ||
A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names for project… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-986695: Information Disclosure Vulnerability in the OZW Web Server - HTML Versionself
- ICS Advisory ICSA-20-042-09 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-042-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (4)
- MitigationOZW672
Configure the product according to the OZW hardening guidelines.
- MitigationOZW772
Configure the product according to the OZW hardening guidelines.
- FixedOZW672
Update to OZW672 V10.00
- FixedOZW772
Update to OZW772 V10.00
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan