Siemens SIPORT MP
view advisory published 2020-02-11
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-19277US | medium6.5 | — | ||
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrat… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-978558: Insufficient Logging Vulnerability in SIPORT MP - HTML Versionself
- ICS Advisory ICSA-20-042-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-042-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSIPORT MP
For SIPORT MP versions 2.2 and later, apply the SIPORT_CleanUsers tool, available at https://support.industry.siemens.com/cs/document/109771860
- FixedSIPORT MP
Update to version 3.1.4
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan