ICSA-18-282-03

icsaUScisa_csaf_ot

ICSA-18-282-03 Siemens ROX II

Advisory ansehen veröffentlicht 2018-10-09

CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-13802UShigh7.2—
A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH could circumvent restrictions i…
CVE-2018-13801UShigh8.8—
A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user credentials for the target devi…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationROX II

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:22/tcp if possible Restrict network access to prevent potential attackers from accessing

  • MitigationROX II

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:22/tcp if possible Restrict network access to prevent potential attackers from accessing

  • BehobenROX II

    Update to V2.12.1 - Download: https://support.industry.siemens.com/cs/us/en/view/109760683

    https://support.industry.siemens.com/cs/us/en/view/109760683
  • BehobenROX II

    Update to V2.12.1 - Download: https://support.industry.siemens.com/cs/us/en/view/109760683

    https://support.industry.siemens.com/cs/us/en/view/109760683
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan