Siemens INTRALOG WMS
INTRALOG WMS before V4 is affected by vulnerabilities in the SQL Client-Server communication and in the .NET framework. Successful exploitation could allow an unauthenticated attacker located in the INTRALOG WMS network to decrypt and modify client-server communication, or potentially execute arbitrary code on the application servers. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please contact your personal INTRALOG WMS contact person referencing the Siemens Security Advisory ID (SSA-417547) and the installed INTRALOG WMS Versions to initiate the dialog with Siemens to get the vulnerabilities fixed.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-30045US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2024-0056US | —OT elevated | — | ||
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | ||||
references
External citations — patches, advisories, analysis.
- SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 - CSAF Versionself
- SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 - HTML Versionself
- ICS Advisory ICSA-24-228-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-228-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (2)
- FixedINTRALOG WMS
Update to V4 or later version
- FixedINTRALOG WMS
Update to V4 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan