Siemens Industrial Edge
view advisory published 2021-09-14
Successful exploitation of this vulnerability could allow an unauthenticated attacker to change the password of any user in the system resulting in the attacker being able to impersonate any valid user on the affected system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37184US | critical9.8 | — | ||
A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under c… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedIndustrial Edge Management
Siemens recommends affected users update to v1.3 or a later version (login required).
https://iehub.eu1.edge.siemens.cloud/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan