SSA-819629: Weak Authentication Vulnerability in Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings within the open Industrial Edge ecosystem. See further details about affected Industrial Edge Devices in the Additional Information section. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
references
External citations — patches, advisories, analysis.
remediations (20)
- MitigationIndustrial Edge Device Kit - arm64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.21
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.21
Ensure network access to affected products is limited to trusted parties only
- No fix plannedIndustrial Edge Device Kit - arm64 V1.17
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.18
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - arm64 V1.19
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.17
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.18
Currently no fix is planned
- No fix plannedIndustrial Edge Device Kit - x86-64 V1.19
Currently no fix is planned
- FixedIndustrial Edge Device Kit - arm64 V1.20
Update to V1.20.2-1 or later version
- FixedIndustrial Edge Device Kit - arm64 V1.21
Update to V1.21.1-1 or later version
- FixedIndustrial Edge Device Kit - x86-64 V1.20
Update to V1.20.2-1 or later version
- FixedIndustrial Edge Device Kit - x86-64 V1.21
Update to V1.21.1-1 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan