Siemens SIPORT MP
Advisory ansehen veröffentlicht 2020-10-13
As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-7591US | high8.8 | — | ||
A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the s… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-384879: Authentication Bypass Vulnerability in SIPORT MP - HTML Versionself
- ICS Advisory ICSA-20-287-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-287-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSIPORT MP
For installations where the update to version 3.2.1 is not possible: contact your local Siemens support for deployment-specific mitigation measures
- BehobenSIPORT MP
Update to version 3.2.1
https://support.industry.siemens.com/cs/ww/en/view/109781856
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan