SSA-220589

csafDEsiemens_psirt

SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter

view advisory published 2022-06-14

Siemens has released updates for Teamcenter that fixes a security vulnerability related to unsecure storage of user credentials. This vulnerability affects Java EE Server Manager HTML Adaptor. This service is not installed by default and currently also obsoleted. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-31619UShigh8.8OT elevated—
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamc…
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • MitigationTeamcenter V12.4

    Harden the application’s host to prevent local access by untrusted personnel

  • MitigationTeamcenter V13.0

    Harden the application’s host to prevent local access by untrusted personnel

  • MitigationTeamcenter V13.1

    Harden the application’s host to prevent local access by untrusted personnel

  • MitigationTeamcenter V13.2

    Harden the application’s host to prevent local access by untrusted personnel

  • MitigationTeamcenter V13.3

    Harden the application’s host to prevent local access by untrusted personnel

  • MitigationTeamcenter V14.0

    Harden the application’s host to prevent local access by untrusted personnel

  • No fix plannedTeamcenter V12.4

    Currently no fix is planned

  • No fix plannedTeamcenter V13.0

    Currently no fix is planned

  • No fix plannedTeamcenter V13.1

    Currently no fix is planned

  • No fix plannedTeamcenter V13.3

    Currently no fix is planned

  • FixedTeamcenter V12.4

    Update to V12.4.0.13 or later version

    https://support.sw.siemens.com/
  • FixedTeamcenter V13.0

    Update to V13.0.0.9 or later version

    https://support.sw.siemens.com/
  • FixedTeamcenter V13.1

    Update to V13.1.0.9 or later version

    https://support.sw.siemens.com/
  • FixedTeamcenter V13.2

    Update to V13.2.0.9 or later version

    https://support.sw.siemens.com/
  • FixedTeamcenter V13.3

    Update to V13.3.0.3 or later version

    https://support.sw.siemens.com/
  • FixedTeamcenter V14.0

    Update to V14.0.0.2 or later version

    https://support.sw.siemens.com/
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan