Siemens SIDIS Prime
view advisory published 2024-02-13
SIDIS Prime before V4.0.400 is affected by multiple vulnerabilities in the components OPC UA and OpenSSL, that could allow an unauthenticated attacker with access to the network where SIDIS Prime is installed to reuse OPC UA client credentials, create a denial of service condition of the SIDIS Prime OPC UA client, or create a denial of service condition of the SIDIS Prime TLS service. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.
01
describes (5)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-29862US | high | — |
| CVE-2022-0778US | high | — |
| CVE-2020-1971US | medium | — |
| CVE-2020-1967US | high | — |
| CVE-2019-19135US | high | — |
02
references
External citations — patches, advisories, analysis.
- SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400 - CSAF Versionself
- SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400 - HTML Versionself
- SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400 - PDF Versionself
- SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400 - TXT Versionself
- ICS Advisory ICSA-24-046-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-046-02 - Web Versionself
- Recommended Practicesexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan