Siemens INTRALOG WMS
INTRALOG WMS before V4 is affected by vulnerabilities in the SQL Client-Server communication and in the .NET framework. Successful exploitation could allow an unauthenticated attacker located in the INTRALOG WMS network to decrypt and modify client-server communication, or potentially execute arbitrary code on the application servers. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please contact your personal INTRALOG WMS contact person referencing the Siemens Security Advisory ID (SSA-417547) and the installed INTRALOG WMS Versions to initiate the dialog with Siemens to get the vulnerabilities fixed.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-30045US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2024-0056US | —OT erhöht | — | ||
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 - CSAF Versionself
- SSA-417547: Multiple Vulnerabilities in INTRALOG WMS Before V4 - HTML Versionself
- ICS Advisory ICSA-24-228-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-228-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- BehobenINTRALOG WMS
Update to V4 or later version
- BehobenINTRALOG WMS
Update to V4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan