SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
Location Intelligence before V4.3 is affected by a Use of Hard-coded Credentials vulnerability that could allow an attacker to obtain full administrative access to the application. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-23816US | critical9.8OT elevated | — | ||
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0)… | ||||
references
External citations — patches, advisories, analysis.
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - CSAF Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - HTML Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - PDF Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - TXT Versionself
remediations (8)
- FixedLocation Intelligence Perpetual Large (9DE5110-8CA13-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence Perpetual Medium (9DE5110-8CA12-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence Perpetual Small (9DE5110-8CA11-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence SUS Large (9DE5110-8CA13-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence SUS Medium (9DE5110-8CA12-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- FixedLocation Intelligence SUS Small (9DE5110-8CA11-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan