Siemens SINEMA Remote Connect Server
Advisory ansehen veröffentlicht 2024-03-12
SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-32257US | critical9.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web service that lacks proper access control for s… | ||||
| CVE-2020-23064US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-20… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - CSAF Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - HTML Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - PDF Versionself
- SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 - TXT Versionself
- ICS Advisory ICSA-24-074-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-074-03 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenSINEMA Remote Connect Server
Update to V3.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811169/ - BehobenSINEMA Remote Connect Server
Update to V3.2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109826375/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan