Siemens Spectrum Power 4
Advisory ansehen veröffentlicht 2022-02-08
A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4. Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-23312US | medium6.1 | — | ||
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cro… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - CSAF Versionself
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - PDF Versionself
- SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4 - TXT Versionself
- ICS Advisory ICSA-22-041-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-041-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationSpectrum Power 4
Do not open unknown links while working on Spectrum Power 4.
- BehobenSpectrum Power 4
Update to V4.70 SP9 Security Patch 1 or later version. Please contact your local Siemens representative.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan