SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
references
External citations — patches, advisories, analysis.
remediations (18)
- MitigationIndustrial Edge Own Device (IEOD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Virtual Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-39A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-59A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC127E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC427E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC847E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- FixedIndustrial Edge Own Device (IEOD)
Update to V1.21.1-1-a or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v25.02/industrial-edge-platform-operation-what-s-new/device-release-notes/release-notes-industrial-edge-own-device - FixedIndustrial Edge Virtual Device
Update to V1.21.1-1-a or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v25.02/industrial-edge-platform-operation-what-s-new/device-release-notes/release-notes-industrial-edge-virtual-device - FixedSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Update to V2.1 or later version
https://docs.eu1.edge.siemens.cloud/release_notes/device_release_notes/LPE9413.html - FixedSIMATIC IPC BX-39A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC BX-59A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC127E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC227E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC427E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - FixedSIMATIC IPC847E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan