NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Siemens Producten
Advisory ansehen veröffentlicht 2024-07-09
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDOM, SIMATIC, SINEMA, SIPROTEC en de Engineering Platforms voor diverse systemen.
01
beschreibt (53)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-7066US | — | — | ||
The affected applications contain an out of bounds read past the end of
an allocated structure while parsing specially crafted PDF files. This
could allow an attacker to execute… | ||||
| CVE-2024-3596US | critical9.0OT hoch | Exploit | ||
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any ot… | ||||
| CVE-2024-39888US | — | — | ||
A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the Enc… | ||||
| CVE-2024-39876US | medium4.0 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly handle log rotation. This could allow an unauth… | ||||
| CVE-2024-39875US | medium4.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows authenticated, low privilege users with the 'Manage o… | ||||
| CVE-2024-39874US | high7.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against u… | ||||
| CVE-2024-39873US | high7.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly implement brute force protection against u… | ||||
| CVE-2024-39872US | critical9.9 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created d… | ||||
| CVE-2024-39871US | medium5.4OT erhöht | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected applications do not properly separate the rights to edit device settings and… | ||||
| CVE-2024-39870US | high7.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A loc… | ||||
| CVE-2024-39869US | medium6.5 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected products allow to upload certificates. An authenticated attacker could uploa… | ||||
| CVE-2024-39868US | high7.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain… | ||||
| CVE-2024-39867US | high7.3 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). Affected devices do not properly validate the authentication when performing certain… | ||||
| CVE-2024-39866US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. This could al… | ||||
| CVE-2024-39865US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users to upload encrypted backup files. As part of th… | ||||
| CVE-2024-39675US | — | — | ||
A vulnerability has been identified in RUGGEDCOM RMC30 (All versions < V4.3.10), RUGGEDCOM RMC30NC (All versions < V4.3.10), RUGGEDCOM RP110 (All versions < V4.3.10), RUGGEDCOM RP1… | ||||
| CVE-2024-39571US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side… | ||||
| CVE-2024-39570US | high8.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 HF1). Affected applications are vulnerable to command injection due to missing server side… | ||||
| CVE-2024-39569US | high7.2 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to… | ||||
| CVE-2024-39568US | high7.8 | — | ||
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to… | ||||
20 von 53 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
- Reference - ncscclear; siemensexternal
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan