Siemens SICAM PQ Analyzer
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability. Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-45460US | high8.1 | — | ||
A vulnerability has been identified in SICAM PQ Analyzer (All versions < V3.18). A service is started by an unquoted registry entry. As there are spaces in this path, attackers wit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer - CSAF Versionself
- SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer - PDF Versionself
- SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer - TXT Versionself
- ICS Advisory ICSA-22-013-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-013-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationSICAM PQ Analyzer
Make sure these executables do not exist, cannot be created or cannot be executed (e.g. by Group Policy Software Restriction): - C:\Program.* - C:\Program Files.* - C:\Program Files (x86)\Siemens.* - C:\Program Files (x86)\Siemens Energy\SICAM\PQ.* Please note that blocking of e.g. "C:\Program.exe" is not sufficient, as the attacker might be able to plant "C:\Program.com", "C:\Program.msi" or an executable with any other extension there.
- BehobenSICAM PQ Analyzer
Update to V3.18 or later version
https://support.industry.siemens.com/cs/ww/en/view/109804322
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan