Siemens SINEC Network Management System Logback Component
Advisory ansehen veröffentlicht 2022-11-08
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-42550US | medium6.6 | — | ||
In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitra… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - CSAF Versionself
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - PDF Versionself
- SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3 - TXT Versionself
- ICS Advisory ICSA-22-314-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-314-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSINEC NMS
Restrict the write access to the logback configuration file ( logback.xml) to trusted personnel
- BehobenSINEC NMS
Update to V1.0.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813788/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan