SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2
Advisory ansehen veröffentlicht 2024-04-09
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-31978US | — | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is… | ||||
| CVE-2023-5678US | medium5.3 | — | ||
Issue summary: Generating excessively long X9.42 DH keys or checking
excessively long X9.42 DH keys or parameters may be very slow.
Impact summary: Applications that use the funct… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - CSAF Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - HTML Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - PDF Versionself
- SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2 - TXT Versionself
03
Behebungen (2)
- BehobenSINEC NMS
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/ - BehobenSINEC NMS
Update to V2.0 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109954920/
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan