Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings within the open Industrial Edge ecosystem. See further details about affected Industrial Edge Devices in the Additional Information section. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-819629: Weak Authentication Vulnerability in Industrial Edge Device Kit - CSAF Versionself
- SSA-819629: Weak Authentication Vulnerability in Industrial Edge Device Kit - HTML Versionself
- ICS Advisory ICSA-25-105-02 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-105-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (20)
- MitigationIndustrial Edge Device Kit - arm64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - arm64 V1.21
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.17
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.18
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.19
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.20
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Device Kit - x86-64 V1.21
Ensure network access to affected products is limited to trusted parties only
- Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.17
Currently no fix is planned
- Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.18
Currently no fix is planned
- Kein Fix geplantIndustrial Edge Device Kit - arm64 V1.19
Currently no fix is planned
- Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.17
Currently no fix is planned
- Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.18
Currently no fix is planned
- Kein Fix geplantIndustrial Edge Device Kit - x86-64 V1.19
Currently no fix is planned
- BehobenIndustrial Edge Device Kit - arm64 V1.20
Update to V1.20.2-1 or later version
- BehobenIndustrial Edge Device Kit - arm64 V1.21
Update to V1.21.1-1 or later version
- BehobenIndustrial Edge Device Kit - x86-64 V1.20
Update to V1.20.2-1 or later version
- BehobenIndustrial Edge Device Kit - x86-64 V1.21
Update to V1.21.1-1 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan