Siemens User Management Component
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-49775US | — | — | ||
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence (All versions < V2501.0001), Opcenter Quality (All versions… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) - CSAF Versionself
- SSA-928984: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC) - HTML Versionself
- ICS Advisory ICSA-24-354-04 JSONself
- ICS Advisory ICSA-24-354-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (24)
- MitigationOpcenter Execution Foundation
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter Intelligence
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter Quality
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationOpcenter RDnL
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V4.0
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V4.1
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSIMATIC PCS neo V5.0
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationSINEC NMS
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V16
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V17
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V18
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- MitigationTotally Integrated Automation Portal (TIA Portal) V19
Filter the ports 4002 and 4004 to only accept connections to/from the IP addresses of machines that run UMC and are part of the UMC network e.g. with an external firewall
- Kein Fix geplantSIMATIC PCS neo V4.0
Currently no fix is planned
- Kein Fix geplantTotally Integrated Automation Portal (TIA Portal) V16
Currently no fix is planned
- BehobenOpcenter Execution Foundation
Update to V2501.0001 or later version
https://support.sw.siemens.com/product/219646572/ - BehobenOpcenter Intelligence
Update to V2501.0001 or later version
https://support.sw.siemens.com/product/287414453/ - BehobenOpcenter Quality
Update to V2512 or later version
https://support.sw.siemens.com/product/249261320 - BehobenOpcenter RDnL
Update to V2410 or later version
https://support.sw.siemens.com/product/297341591/ - BehobenSIMATIC PCS neo V4.1
Update to V4.1 Update 3 or later version
https://support.industry.siemens.com/cs/ww/en/view/109978820/ - BehobenSIMATIC PCS neo V5.0
Update to V5.0 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109977244/ - BehobenSINEC NMS
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V17
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V18
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
- BehobenTotally Integrated Automation Portal (TIA Portal) V19
Update UMC to V2.15.1.1 or later compatible version https://support.industry.siemens.com/cs/ww/en/view/109987708/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan