SSA-692317: Authorization Bypass Vulnerability in Industrial Edge
view advisory published 2021-09-14
The latest update for Industrial Edge fixes a vulnerability that could allow an unauthenticated attacker to change the password of any user in the system. With this an attacker could impersonate any valid user on an affected system. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37184US | critical9.8 | — | ||
A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under c… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedIndustrial Edge Management
Update to V1.3 or later version
https://iehub.eu1.edge.siemens.cloud/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan