SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1
SIMATIC Energy Manager is affected by multiple vulnerabilities that could allow an attacker to gain local privilege escalation, local code execution or remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-23450US | critical9.8 | — | ||
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). The affected system a… | ||||
| CVE-2022-23449US | high7.3 | — | ||
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). A DLL Hijacking vulne… | ||||
| CVE-2022-23448US | high7.8 | — | ||
A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versions < V7.3 Update 1). Affected applications… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 - CSAF Versionself
- SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 - PDF Versionself
- SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1 - TXT Versionself
Behebungen (12)
- MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
- MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
- MitigationSIMATIC Energy Manager Basic
Enable encryption in the SIMATIC Energy Manager configuration
- MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
- MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
- MitigationSIMATIC Energy Manager PRO
Enable encryption in the SIMATIC Energy Manager configuration
- BehobenSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/ - BehobenSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/ - BehobenSIMATIC Energy Manager Basic
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/ - BehobenSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/ - BehobenSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/ - BehobenSIMATIC Energy Manager PRO
Update to V7.3 Update 1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109808211/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan