Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices - CSAF Versionself
- SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices - HTML Versionself
- ICS Advisory ICSA-25-100-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-100-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (18)
- MitigationIndustrial Edge Own Device (IEOD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Virtual Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-39A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-59A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC127E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC427E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC847E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- Kein Fix verfügbarSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Currently no fix is available
- BehobenIndustrial Edge Own Device (IEOD)
Update to V1.21.1-1-a or later version
- BehobenIndustrial Edge Virtual Device
Update to V1.21.1-1-a or later version
- BehobenSIMATIC IPC BX-39A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC BX-59A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC127E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC227E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC427E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC847E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan