Siemens RUGGEDCOM CROSSBOW V5.2
Advisory ansehen veröffentlicht 2023-03-14
RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that could allow authenticated remote attackers to perform unauthorized actions (CVE-2023-27309) or escalate privileges (CVE-2023-27310). Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-27310US | high8.8OT erhöht | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when ass… | ||||
| CVE-2023-27309US | high8.8OT erhöht | — | ||
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for spec… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 - CSAF Versionself
- SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 - PDF Versionself
- SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2 - TXT Versionself
- ICS Advisory ICSA-23-075-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-075-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenRUGGEDCOM CROSSBOW
Update to V5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/ - BehobenRUGGEDCOM CROSSBOW
Update to V5.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109813558/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan