Siemens Synco OZW Default Password
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2012-3020US | high7.5 | — | ||
The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to o… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-12-214-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-12-214-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- MitigationSynco models
Siemens has released a firmware update (Version 4) and security advisory SSA-283911 (https://cert-portal.siemens.com/productcert/pdf/ssa-283911.pdf) for the OZW672 and OZW772 devices that enforces a password change at initial login. (http://support.automation.siemens.com/WW/view/en/41929231/130000) Users may upgrade to this firmware version, but this is not required to change the default password on existing devices. Siemens urges customers to set a secure password on the web interface for all network devices.
http://support.automation.siemens.com/WW/view/en/41929231/130000
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan