Siemens OPC UA
The products listed below contain two authentication bypass vulnerabilities that could allow an attacker to gain access to the data managed by the server. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-42513US | — | — | ||
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints. | ||||
| CVE-2024-42512US | — | — | ||
Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security p… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-858251: Authentication Bypass Vulnerabilities in OPC UA - CSAF Versionself
- SSA-858251: Authentication Bypass Vulnerabilities in OPC UA - HTML Versionself
- ICS Advisory ICSA-25-072-09 JSONself
- ICS Advisory ICSA-25-072-09 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (17)
- MitigationSIMATIC IPC DiagMonitor
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default. Systems running with default configuration are therefore not affected by this vulnerability.
- MitigationSIMATIC WinCC Unified V18
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default in Unified RT. Systems running with default configuration are therefore not affected by this vulnerability.
- MitigationSIMATIC WinCC Unified V19
Please note that the affected functionality (HTTPS endpoint in OPC UA Server) is deactivated by default in Unified RT. Systems running with default configuration are therefore not affected by this vulnerability.
- Kein Fix geplantIndustrial Edge for Machine Tools (formerly known as "SINUMERIK Edge")
Currently no fix is planned
- Kein Fix geplantSIMATIC Energy Manager PRO V7.2
Currently no fix is planned
- Kein Fix geplantSIMATIC Energy Manager PRO V7.2
Currently no fix is planned
- Kein Fix geplantSIMATIC Energy Manager PRO V7.3
Currently no fix is planned
- Kein Fix geplantSIMATIC Energy Manager PRO V7.3
Currently no fix is planned
- Kein Fix geplantSIMATIC IPC DiagMonitor
Currently no fix is planned
- Kein Fix verfügbarSIMATIC WinCC Unified V18
Currently no fix is available
- BehobenSIMATIC Energy Manager PRO V7.4
Update to V7.4 Update 7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997044/ - BehobenSIMATIC Energy Manager PRO V7.4
Update to V7.4 Update 7 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997044/ - BehobenSIMATIC Energy Manager PRO V7.5
Update to V7.5 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109996728/ - BehobenSIMATIC Energy Manager PRO V7.5
Update to V7.5 Update 2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109996728/ - BehobenSIMATIC WinCC Unified V19
Update to V19 Update 4 or later version
https://support.industry.siemens.com/cs/ww/en/view/109925643/ - BehobenSIMATIC WinCC V8.0
Update to V8.0 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109818723/ - BehobenSIMIT V11
Update to V11.3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109987184/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan