Siemens SINEMA Remote Connect Client
Advisory ansehen veröffentlicht 2024-03-12
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-22045US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.1 SP1). The product places sensitive information into files or directories that are accessibl… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - CSAF Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - HTML Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - PDF Versionself
- SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1 - TXT Versionself
- ICS Advisory ICSA-24-074-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-074-04 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSINEMA Remote Connect Client
In order to fully mitigate the issue, administrators are advised to backup and clear the log files and to change the VPN credentials.
- BehobenSINEMA Remote Connect Client
Update to V3.1 SP1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817939/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan