ICSA-25-317-16

icsaUScisa_csaf_ot

Siemens Altair Grid Engine

Advisory ansehen veröffentlicht 2025-11-11

Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest version.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2025-40763US——
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries…
CVE-2025-40760US——
A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

  • MitigationAltair Grid Engine

    For clusters not using the UGERest API/daemon remove the setuid-root bit from the binaries for all architectures: chmod u-s $SGE_ROOT/utilbin/&lt;arch&gt;/authuser.

  • MitigationAltair Grid Engine

    For non Windows clusters remove the setuid-root bit from the "sgepasswd" binary for all installed architectures: chmod u-s $SGE_ROOT/bin/&lt;arch&gt;/sgepasswd.

  • BehobenAltair Grid Engine

    Update to V2026.0.0 or later version

    https://altairone.com/Marketplace
  • BehobenAltair Grid Engine

    Update to V2026.0.0 or later version

    https://altairone.com/Marketplace
scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan