Siemens Desigo CC
view advisory published 2020-08-11
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10055US | critical9.8 | — | ||
A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-786743: Code Injection Vulnerability in Advanced Reporting for Desigo CC and Desigo CC Compact - HTML Versionself
- ICS Advisory ICSA-20-224-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-224-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationDesigo CC
If the extension module Advanced Reporting is already installed, apply the patch as documented above
- MitigationDesigo CC Compact
If the extension module Advanced Reporting is already installed, apply the patch as documented above
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan