​Siemens Software Center
Multiple DLL Hijacking vulnerabilities in Siemens Software Center (SSC) could allow a local attacker to execute code with elevated privileges. Siemens has released an update for the Siemens Software Center and recommends to update to the latest version.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-41544US | high7.8 | — | ||
A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privi… | ||||
| CVE-2022-25634US | high7.5 | — | ||
Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - CSAF Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - HTML Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - PDF Versionself
- SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center - TXT Versionself
- ICS Advisory ICSA-23-222-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-222-04 - Web Versionself
- Recommended Practicesexternal
Behebungen (4)
- MitigationSiemens Software Center
Harden the application host to prevent local access by untrusted personnel
- MitigationSiemens Software Center
Harden the application host to prevent local access by untrusted personnel
- BehobenSiemens Software Center
Update to V3.0 or later version (Existing installations of SSC will be prompted to update whenever a new version is available. The latest version can also be downloaded in the respective link)
https://www.sw.siemens.com/en-US/siemens-software-center/ - BehobenSiemens Software Center
Update to V3.0 or later version (Existing installations of SSC will be prompted to update whenever a new version is available. The latest version can also be downloaded in the respective link)
https://www.sw.siemens.com/en-US/siemens-software-center/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan