SSA-634640: Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-54092US | — | — | ||
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device Kit - arm64 V1.18 (All versions), Industrial Edge Device Kit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (18)
- MitigationIndustrial Edge Own Device (IEOD)
Ensure network access to affected products is limited to trusted parties only
- MitigationIndustrial Edge Virtual Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-39A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC BX-59A Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC127E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC227E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC427E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- MitigationSIMATIC IPC847E Industrial Edge Device
Ensure network access to affected products is limited to trusted parties only
- BehobenIndustrial Edge Own Device (IEOD)
Update to V1.21.1-1-a or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v25.02/industrial-edge-platform-operation-what-s-new/device-release-notes/release-notes-industrial-edge-own-device - BehobenIndustrial Edge Virtual Device
Update to V1.21.1-1-a or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v25.02/industrial-edge-platform-operation-what-s-new/device-release-notes/release-notes-industrial-edge-virtual-device - BehobenSCALANCE LPE9413 (6GK5998-3GS01-2AC2)
Update to V2.1 or later version
https://docs.eu1.edge.siemens.cloud/release_notes/device_release_notes/LPE9413.html - BehobenSIMATIC IPC BX-39A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC BX-59A Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC127E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC227E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC427E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes - BehobenSIMATIC IPC847E Industrial Edge Device
Update to V3.0 or later version
https://docs.industrial-operations-x.siemens.cloud/r/en-us/v3.0/simatic-ipc-ied-os/release-notes
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan