Siemens Industrial Edge Management
Advisory ansehen veröffentlicht 2025-09-09
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-48976US | — | Exploit | ||
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload.
This issue affects Apache Commons FileUpload: from… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-640476: Denial of Service Vulnerability in Industrial Edge Management - CSAF Versionself
- SSA-640476: Denial of Service Vulnerability in Industrial Edge Management - HTML Versionself
- ICS Advisory ICSA-25-254-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-254-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationIndustrial Edge Management OS (IEM-OS)
Limit access to trusted users and systems only
- Kein Fix geplantIndustrial Edge Management OS (IEM-OS)
Currently no fix is planned
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan