Siemens Industrial Edge Management
Advisory ansehen veröffentlicht 2025-01-14
Industrial Edge Management is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Siemens recommends countermeasures for products where fixes are not, or not yet available.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45385US | medium6.1 | — | ||
A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to reflected cross-site scripting (XSS) attacks. Th… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management - CSAF Versionself
- SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management - HTML Versionself
- ICS Advisory ICSA-25-016-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-016-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationIndustrial Edge Management OS (IEM-OS)
Migrate to Industrial Edge Management Virtual (IEM-V)
- Kein Fix geplantIndustrial Edge Management OS (IEM-OS)
Currently no fix is planned
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan