Siemens SINEMA Vulnerabilities
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-2733US | medium5.0 | — | ||
Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80. | ||||
| CVE-2014-2732US | medium5.0 | — | ||
Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic t… | ||||
| CVE-2014-2731US | high9.3 | — | ||
Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-14-107-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-14-107-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725 - MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725 - MitigationSINEMA Server
Siemens has provided a software update (V12 SP1) for SINEMA server that fixes these vulnerabilities. Users of these systems may find it at the following location at Siemens web site: (http://support.automation.siemens.com/WW/view/de/74758725)
http://support.automation.siemens.com/WW/view/de/74758725
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan