Siemens SINEC Network Management System Logback Component
view advisory published 2022-11-08
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-42550US | medium6.6 | — | ||
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitra… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - CSAF Versionself
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - PDF Versionself
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - TXT Versionself
- ICS Advisory ICSA-22-314-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-314-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationSINEC NMS
Restrict the write access to the logback configuration file ( logback.xml) to trusted personnel
- FixedSINEC NMS
Update to V1.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813788/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan