Siemens Opcenter Quality
Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules using IbsGailWrapper-interface. After issuing the record the authentication bypass vulnerability could take place on all modules. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-33736US | high7.5 | — | ||
A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - CSAF Versionself
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - PDF Versionself
- SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality - TXT Versionself
- ICS Advisory ICSA-22-195-17 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-195-17 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationOpcenter Quality V13.1
For all other cases it is recommended to replace the IbsGailWrapper.dll for short-term
- MitigationOpcenter Quality V13.2
For all other cases it is recommended to replace the IbsGailWrapper.dll for short-term
- BehobenOpcenter Quality V13.1
Update to V13.1.20220624 or later version
https://support.sw.siemens.com/ - BehobenOpcenter Quality V13.2
Update to V13.2.20220624 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan