Siemens Desigo CC
Advisory ansehen veröffentlicht 2020-08-11
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-10055US | critical9.8 | — | ||
A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-786743: Code Injection Vulnerability in Advanced Reporting for Desigo CC and Desigo CC Compact - HTML Versionself
- ICS Advisory ICSA-20-224-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-224-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationDesigo CC
If the extension module Advanced Reporting is already installed, apply the patch as documented above
- MitigationDesigo CC Compact
If the extension module Advanced Reporting is already installed, apply the patch as documented above
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan