ICSA-25-135-02

Siemens INTRALOG WMS

Advisory ansehen veröffentlicht 2025-05-13

INTRALOG WMS before V5 is affected by multiple vulnerabilities in the Microsoft .NET implementation as described below. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please approach your INTRALOG WMS contact to resolve the reported vulnerabilities for your solution. When contacting your Siemens representative, kindly reference the Siemens Security Advisory ID (SSA-901508).

beschreibt (8)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2024-43485US	—	3.08% (88th)	—	2024-10-08
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-43483US	—	2.90% (87th)	—	2024-10-08
.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
CVE-2024-38095US	—	2.74% (86th)	—	2024-07-09
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-38081US	—	1.30% (70th)	—	2024-07-09
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2024-35264US	—	2.56% (85th)	—	2024-07-09
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2024-30105US	—	2.94% (87th)	—	2024-07-09
.NET and Visual Studio Denial of Service Vulnerability
CVE-2024-20672US	—	2.90% (87th)	—	2024-01-09
.NET Denial of Service Vulnerability
CVE-2024-0056US	—OT erhöht	1.18% (68th)	—	2024-01-09
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5 - CSAF Versionself
SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5 - HTML Versionself
ICS Advisory ICSA-25-135-02 JSONself
Recommended Practicesexternal
ICS Advisory ICSA-25-135-02 - Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (8)

BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version
BehobenINTRALOG WMS
Update to V5 or later version

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan