ICSA-19-260-02 Siemens SINEMA Remote Connect Server
CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-13922US | low2.7OT erhöht | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device'… | ||||
| CVE-2019-13920US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forger… | ||||
| CVE-2019-13919US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some pages that should only be accessible by a privileged user can also be accessed b… | ||||
| CVE-2019-13918US | critical9.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerabilit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- MitigationSINEMA Remote Connect Server
Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk:Remote Connect Do not access links from untrusted sources while logged in at SINEMA
- BehobenSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - BehobenSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - BehobenSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899 - BehobenSINEMA Remote Connect Server
Update to V2.0 SP1 - Download: https://support.industry.siemens.com/cs/ww/en/view/109770899
https://support.industry.siemens.com/cs/ww/en/view/109770899
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan