SSA-160202

csafDEsiemens_psirt

SSA-160202: Multiple Access Control Vulnerabilities in SiPass Integrated

Advisory ansehen veröffentlicht 2021-12-14

SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released a tool, "SiPass integrated Component Manager", to remediate the vulnerabilities on all maintained and supported versions of SiPass integrated and recommends to apply this tool.

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-44524UScritical9.8—
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity…
CVE-2021-44523UScritical9.1—
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity…
CVE-2021-44522UShigh7.5—
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (9)

  • BehobenSiPass integrated V2.76

    Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.76

    Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.76

    Update to V2.76 SP2 and then download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.80

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.80

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.80

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.85

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.85

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

  • BehobenSiPass integrated V2.85

    Download and execute the SiPass integrated Component Manager: https://support.industry.siemens.com/cs/ww/en/view/109802587/

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan