SSA-342348

csafDEsiemens_psirt

SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products

view advisory published 2025-02-11

Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-45386US——
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1)…
02

references

External citations — patches, advisories, analysis.

03

remediations (14)

  • MitigationSIMATIC PCS neo V4.0

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationSIMATIC PCS neo V4.1

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationSIMATIC PCS neo V5.0

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationSIMOCODE ES V19

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationSIRIUS Safety ES V19 (TIA Portal)

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationSIRIUS Soft Starter ES V19 (TIA Portal)

    Close browser and client after logout and remove all locally stored session tokens

  • MitigationTIA Administrator

    Close browser and client after logout and remove all locally stored session tokens

  • No fix plannedSIMATIC PCS neo V4.0

    Currently no fix is planned

  • FixedSIMATIC PCS neo V4.1

    Update to V4.1 Update 2 or later version

  • FixedSIMATIC PCS neo V5.0

    Update to V5.0 Update 1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109977244/
  • FixedSIMOCODE ES V19

    Update to V19 Update 1 or later version

  • FixedSIRIUS Safety ES V19 (TIA Portal)

    Update to V19 Update 1 or later version

  • FixedSIRIUS Soft Starter ES V19 (TIA Portal)

    Update to V19 Update 1 or later version

  • FixedTIA Administrator

    Update to V3.0.4 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan