SSA-523418: Information Disclosure Vulnerability in Desigo CC
Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected by this vulnerability. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-23815US | —OT elevated | — | ||
A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), De… | ||||
references
External citations — patches, advisories, analysis.
remediations (2)
- MitigationDesigo CC
Restrict access to the server's event port (default: 4998/tcp)
- FixedDesigo CC
On the Desigo CC server, disable the support for Installed Clients
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan