Siemens TeleControl Server
TeleControl Server Basic V3.1 contains a deserialization vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-44102US | — | — | ||
A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Serve… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 - CSAF Versionself
- SSA-454789: Deserialization Vulnerability in TeleControl Server Basic V3.1 - HTML Versionself
- ICS Advisory ICSA-24-319-10 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-319-10 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (26)
- MitigationPP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1)
Disable redundancy, if not used
- MitigationPP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0)
Disable redundancy, if not used
- MitigationTeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1)
Disable redundancy, if not used
- MitigationTeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0)
Disable redundancy, if not used
- BehobenPP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenPP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-0AD1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenPP TeleControl Server Basic 32 to 64 V3.1 (6NH9910-0AA31-0AF1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenPP TeleControl Server Basic 64 to 256 V3.1 (6NH9910-0AA31-0AC1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenPP TeleControl Server Basic 8 to 32 V3.1 (6NH9910-0AA31-0AB1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 1000 V3.1 (6NH9910-0AA31-0AD0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 256 V3.1 (6NH9910-0AA31-0AC0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 32 V3.1 (6NH9910-0AA31-0AF0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 5000 V3.1 (6NH9910-0AA31-0AE0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 64 V3.1 (6NH9910-0AA31-0AB0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic 8 V3.1 (6NH9910-0AA31-0AA0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic Serv Upgr (6NH9910-0AA31-0GA1)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/ - BehobenTeleControl Server Basic Upgr V3.1 (6NH9910-0AA31-0GA0)
Update to V3.1.2.1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109975921/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan