Siemens Industrial Edge Management
view advisory published 2024-09-10
Industrial Edge Management contains an Authorization Bypass vulnerability that could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system. Siemens has released new versions for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-45032US | — | — | ||
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-359713: Authorization Bypass Vulnerability in Industrial Edge Management - CSAF Versionself
- SSA-359713: Authorization Bypass Vulnerability in Industrial Edge Management - HTML Versionself
- ICS Advisory ICSA-24-256-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-256-11 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedIndustrial Edge Management Pro
Update to V1.9.5 or later version
- FixedIndustrial Edge Management Virtual
Update to V2.3.1-1 or later version
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan