Siemens DIGSI 4
Advisory ansehen veröffentlicht 2021-02-09
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25245US | high7.8OT erhöht | — | ||
A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these folders are included in the se… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-536315: Privilege escalation vulnerability in DIGSI 4 - HTML Versionself
- ICS Advisory ICSA-21-040-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-040-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenDIGSI 4
Update to V4.94 SP1 HF 1 or later version
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan