Siemens Desigo
Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected by this vulnerability. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-23815US | —OT erhöht | — | ||
A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), De… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-523418: Information Disclosure Vulnerability in Desigo CC - CSAF Versionself
- SSA-523418: Information Disclosure Vulnerability in Desigo CC - HTML Versionself
- ICS Advisory ICSA-25-135-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-135-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationDesigo CC
Restrict access to the server's event port (default: 4998/tcp)
- BehobenDesigo CC
On the Desigo CC server, disable the support for Installed Clients
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan