Siemens Teamcenter
Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-29801US | high7.5 | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The application contains a XML External Entity Inj… | ||||
| CVE-2022-24290US | high7.5 | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions), Teamcenter V13.2… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-789162: Vulnerabilities in Teamcenter - CSAF Versionself
- SSA-789162: Vulnerabilities in Teamcenter - PDF Versionself
- SSA-789162: Vulnerabilities in Teamcenter - TXT Versionself
- ICS Advisory ICSA-22-132-16 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-132-16 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (22)
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.1
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.2
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.3
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V14.0
Harden the application’s host to prevent local access by untrusted personnel
- Kein Fix geplantTeamcenter V12.4
Currently no fix is planned
- Kein Fix geplantTeamcenter V12.4
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.0
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.0
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.2
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.3
Currently no fix is planned
- BehobenTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.2
Update to V13.2.0.8 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan