SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11
view advisory published 2024-06-11
PowerSys before V3.11 is affected by a vulnerability that could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices. Siemens has released a new version for PowerSys and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-36266US | high7.8 | — | ||
A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a lo… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 - CSAF Versionself
- SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 - HTML Versionself
- SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 - PDF Versionself
- SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 - TXT Versionself
03
remediations (1)
- FixedPowerSys
Update to V3.11 or later version
https://support.industry.siemens.com/cs/ww/en/view/109963280/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan