Siemens SINEMA Server
The latest update for SINEMA Server fixes a vulnerability that could allow an unauthenticated attacker to obtain encoded system configuration backup files under certain conditions. Siemens has released an update for the SINEMA Server and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-10941US | medium5.3OT elevated | — | ||
A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality that requires administrative user identity could allow an at… | ||||
references
External citations — patches, advisories, analysis.
- SSA-835377: Missing Authentication Vulnerability in SINEMA Server - CSAF Versionself
- SSA-835377: Missing Authentication Vulnerability in SINEMA Server - PDF Versionself
- SSA-835377: Missing Authentication Vulnerability in SINEMA Server - TXT Versionself
- ICS Advisory ICSA-21-257-12 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-257-12 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationSINEMA Server
Monitor and restrict network access to device port 443/tcp and 80/tcp to trusted IP addresses
- FixedSINEMA Server
Update to V14 SP3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801374/ - WorkaroundSINEMA Server
Consider adding to your monitoring capabilities an allowed time window for system configuration backup download. This will be an auxiliar to create a baseline and monitor for abnormal behavior
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan