Siemens SIPORT MP
Advisory ansehen veröffentlicht 2020-02-11
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-19277US | medium6.5 | — | ||
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrat… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-978558: Insufficient Logging Vulnerability in SIPORT MP - HTML Versionself
- ICS Advisory ICSA-20-042-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-042-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSIPORT MP
For SIPORT MP versions 2.2 and later, apply the SIPORT_CleanUsers tool, available at https://support.industry.siemens.com/cs/document/109771860
- BehobenSIPORT MP
Update to version 3.1.4
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan