Siemens Opcenter Quality
Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules using IbsGailWrapper-interface. After issuing the record the authentication bypass vulnerability could take place on all modules. Siemens has released updates for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-33736US | high7.5 | — | ||
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do… | ||||
references
External citations — patches, advisories, analysis.
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - CSAF Versionself
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - PDF Versionself
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - TXT Versionself
- ICS Advisory ICSA-22-195-17 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-195-17 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationOpcenter Quality V13.1
For all other cases it is recommended to replace the IbsGailWrapper.dll for short-term
- MitigationOpcenter Quality V13.2
For all other cases it is recommended to replace the IbsGailWrapper.dll for short-term
- FixedOpcenter Quality V13.1
Update to V13.1.20220624 or later version
https://support.sw.siemens.com/ - FixedOpcenter Quality V13.2
Update to V13.2.20220624 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan