Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45386US | — | — | ||
A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1)… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products - CSAF Versionself
- SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products - HTML Versionself
- ICS Advisory ICSA-25-044-13 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-044-13 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (14)
- MitigationSIMATIC PCS neo V4.0
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMATIC PCS neo V4.1
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMATIC PCS neo V5.0
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIMOCODE ES V19
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIRIUS Safety ES V19 (TIA Portal)
Close browser and client after logout and remove all locally stored session tokens
- MitigationSIRIUS Soft Starter ES V19 (TIA Portal)
Close browser and client after logout and remove all locally stored session tokens
- MitigationTIA Administrator
Close browser and client after logout and remove all locally stored session tokens
- Kein Fix geplantSIMATIC PCS neo V4.0
Currently no fix is planned
- BehobenSIMATIC PCS neo V4.1
Update to V4.1 Update 2 or later version
- BehobenSIMATIC PCS neo V5.0
Update to V5.0 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977244/ - BehobenSIMOCODE ES V19
Update to V19 Update 1 or later version
- BehobenSIRIUS Safety ES V19 (TIA Portal)
Update to V19 Update 1 or later version
- BehobenSIRIUS Soft Starter ES V19 (TIA Portal)
Update to V19 Update 1 or later version
- BehobenTIA Administrator
Update to V3.0.4 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan