Siemens Siveillance Control
Advisory ansehen veröffentlicht 2024-03-12
Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new version for Siveillance Control and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-45793US | —OT erhöht | — | ||
A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does not properly check the list of access groups that are assigned… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-145196: Authorization Bypass Vulnerability in Siveillance Control - CSAF Versionself
- SSA-145196: Authorization Bypass Vulnerability in Siveillance Control - HTML Versionself
- SSA-145196: Authorization Bypass Vulnerability in Siveillance Control - PDF Versionself
- SSA-145196: Authorization Bypass Vulnerability in Siveillance Control - TXT Versionself
- ICS Advisory ICSA-24-074-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-074-10 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSiveillance Control
Restrict access to the machine where the Siveillance Control frontend is installed
- BehobenSiveillance Control
Update to V3.1.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109827073/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan