Siemens Teamcenter
Siemens has released updates for Teamcenter that fixes a security vulnerability related to unsecure storage of user credentials. This vulnerability affects Java EE Server Manager HTML Adaptor. This service is not installed by default and currently also obsoleted. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31619US | high8.8OT erhöht | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamc… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter - CSAF Versionself
- SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter - PDF Versionself
- SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter - TXT Versionself
- ICS Advisory ICSA-22-167-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-167-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (16)
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.1
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.2
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.3
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V14.0
Harden the application’s host to prevent local access by untrusted personnel
- Kein Fix geplantTeamcenter V12.4
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.0
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.1
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.3
Currently no fix is planned
- BehobenTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan