Siemens SIPORT MP
view advisory published 2020-10-13
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7591US | high8.8 | — | ||
A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the s… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-384879: Authentication Bypass Vulnerability in SIPORT MP - HTML Versionself
- ICS Advisory ICSA-20-287-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-287-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSIPORT MP
For installations where the update to version 3.2.1 is not possible: contact your local Siemens support for deployment-specific mitigation measures
- FixedSIPORT MP
Update to version 3.2.1
https://support.industry.siemens.com/cs/ww/en/view/109781856
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan