Siemens SINEMA Server Privilege Escalation Vulnerability (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6486US | high7.8 | — | ||
Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-215-02A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-215-02A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- MitigationSINEMA Server
As a general security measure, Siemens strongly recommends protecting network access to SINEMA Server systems with appropriate mechanisms. It is advised to configure the environment according to Siemens operational guidelines in order to run the devices in a protected IT environment. For more information on this vulnerability, please see Siemens Security Advisory SSA-321174 at the following location: (http://www.siemens.com/cert/advisories)
http://www.siemens.com/cert/advisories
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan