SSA-901508

csafDEsiemens_psirt

SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5

view advisory published 2025-05-13

INTRALOG WMS before V5 is affected by multiple vulnerabilities in the Microsoft .NET implementation as described below. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please approach your INTRALOG WMS contact to resolve the reported vulnerabilities for your solution. When contacting your Siemens representative, kindly reference the Siemens Security Advisory ID (SSA-901508).

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2024-43485US——
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43483US——
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-38095US——
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38081US——
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2024-35264US——
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30105US——
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-20672US——
.NET Denial of Service Vulnerability
CVE-2024-0056US—OT elevated—
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

  • FixedINTRALOG WMS

    Update to V5 or later version

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan