Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
references
External citations — patches, advisories, analysis.
- SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices - CSAF Versionself
- SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices - HTML Versionself
- ICS Advisory ICSA-25-100-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-100-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (18)
- MitigationIndustrial Edge Own Device (IEOD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Virtual Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-39A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-59A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC127E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC427E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC847E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- No fix availableSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Currently no fix is available
- FixedIndustrial Edge Own Device (IEOD)
Update to V1.21.1-1-a or later version
- FixedIndustrial Edge Virtual Device
Update to V1.21.1-1-a or later version
- FixedSIMATIC IPC BX-39A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC BX-59A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC127E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC227E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC427E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC847E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan