SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
Location Intelligence before V4.3 is affected by a Use of Hard-coded Credentials vulnerability that could allow an attacker to obtain full administrative access to the application. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-23816US | critical9.8OT erhöht | — | ||
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0)… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - CSAF Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - HTML Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - PDF Versionself
- SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3 - TXT Versionself
Behebungen (8)
- BehobenLocation Intelligence Perpetual Large (9DE5110-8CA13-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence Perpetual Medium (9DE5110-8CA12-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence Perpetual Small (9DE5110-8CA11-1AX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence SUS Large (9DE5110-8CA13-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence SUS Medium (9DE5110-8CA12-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
- BehobenLocation Intelligence SUS Small (9DE5110-8CA11-1BX0)
Update to V4.3 or later version. The update is available from Siemens Online Software Delivery (OSD).
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan