Siemens Mendix Forgot Password Module
Successful exploitation of the vulnerability could allow an attacker to retrieve sensitive information.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-26293US | — | — | ||
A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal) V16 (All versions < V… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-116924: Path Traversal Vulnerability in TIA Portal - CSAF Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - HTML Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - PDF Versionexternal
- SSA-116924: Path Traversal Vulnerability in TIA Portal - TXT Versionexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-23-103-08 JSONself
- ICS Advisory ICSA-23-103-08 Web Versionself
- Recommended Practicesexternal
Behebungen (8)
- MitigationTotally Integrated Automation Portal (TIA Portal) V15
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V16
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V15
Currently no fix is planned
- Kein Fix verfügbarTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is available
- BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update to V17 Update 6 or later version
https://support.industry.siemens.com/cs/ww/en/view/109784441/ - BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update to V18 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109817218/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan