SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V2506
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41986US | medium6.8OT erhöht | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41985US | high7.3 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41984US | low3.5 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41983US | medium4.3 | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41982US | medium5.7OT erhöht | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41980US | medium5.7OT erhöht | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
| CVE-2024-41979US | high8.0OT erhöht | — | ||
A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versio… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (39)
- MitigationSOA Audit
All the users (including in LDAP) should be given the least privileges required
- MitigationSOA Audit
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSOA Audit
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Audit
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Audit
Limit the permission to access those fields using the least privilege strategy
- MitigationSOA Audit
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- MitigationSOA Cockpit
All the users (including in LDAP) should be given the least privileges required
- MitigationSOA Cockpit
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSOA Cockpit
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSOA Cockpit
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSOA Cockpit
Limit the permission to access those fields using the least privilege strategy
- MitigationSOA Cockpit
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- MitigationSmartClient modules Opcenter QL Home (SC)
All the users (including in LDAP) should be given the least privileges required
- MitigationSmartClient modules Opcenter QL Home (SC)
Disable all protocols (SSL v2/v3, TLS 1.0, TLS 1.1) the solution should not use.
- MitigationSmartClient modules Opcenter QL Home (SC)
Do not use original table structures and accounts for reporting. Create your own reporting accounts which have access via synonyms forwarding on views representing access to result-sets the user may use for evaluation
- MitigationSmartClient modules Opcenter QL Home (SC)
Hardening of the solution, including the OS and IIS, is required, with specific measures such as hiding the IIS version to enhance security
- MitigationSmartClient modules Opcenter QL Home (SC)
Limit the permission to access those fields using the least privilege strategy
- MitigationSmartClient modules Opcenter QL Home (SC)
Remove all tools giving possibility to call SOAP-services outside from the SmartClient
- BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Audit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSOA Cockpit
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/ - BehobenSmartClient modules Opcenter QL Home (SC)
Update to V2506 or later version
https://support.sw.siemens.com/product/249261320/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan