SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0
Siveillance Identity contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-44524US | critical9.8 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44523US | critical9.1 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
| CVE-2021-44522US | high7.5 | — | ||
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - CSAF Versionself
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - PDF Versionself
- SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - TXT Versionself
Behebungen (6)
- BehobenSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- BehobenSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- BehobenSiveillance Identity V1.5
Update to V1.5 SP4 and apply the Credential Patch Tool: https://support.industry.siemens.com/cs/ww/en/view/109801824/
- BehobenSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/ - BehobenSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/ - BehobenSiveillance Identity V1.6
Update to V1.6.284.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109801819/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan