SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter
Siemens has released updates for Teamcenter that fixes a security vulnerability related to unsecure storage of user credentials. This vulnerability affects Java EE Server Manager HTML Adaptor. This service is not installed by default and currently also obsoleted. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31619US | high8.8OT erhöht | — | ||
A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9), Teamcenter V13.1 (All versions < V13.1.0.9), Teamc… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (16)
- MitigationTeamcenter V12.4
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.0
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.1
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.2
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V13.3
Harden the application’s host to prevent local access by untrusted personnel
- MitigationTeamcenter V14.0
Harden the application’s host to prevent local access by untrusted personnel
- Kein Fix geplantTeamcenter V12.4
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.0
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.1
Currently no fix is planned
- Kein Fix geplantTeamcenter V13.3
Currently no fix is planned
- BehobenTeamcenter V12.4
Update to V12.4.0.13 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.0
Update to V13.0.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.1
Update to V13.1.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.2
Update to V13.2.0.9 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V13.3
Update to V13.3.0.3 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter V14.0
Update to V14.0.0.2 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan