Firma Siemens informuje o nowych podatnościach w swoich produktach-09-11-22

cert.pse-online.pl 2 lat temu

8 listopada 2022 firma Siemens opublikowała zalecenia dotyczące bezpieczeństwa dotyczące luk w następujących produktach:

ID	CVSS	Opis
SSA-853037	7.8	File Parsing Vulnerabilities in Parasolid
SSA-787941	5.3	Denial of Service Vulnerability in RUGGEDCOM ROS V4
SSA-764417	6.7	Weak Encryption Vulnerability in RUGGEDCOM ROS Devices
SSA-638652	7.4	Authentication Bypass Vulnerability in Mendix SAML Module
SSA-620288	8.2	Multiple Vulnerabilities (NUCLEUS:13) in CAPITAL VSTAR
SSA-587547	7.6	Unencrypted Storage of User Credentials in QMS Automotive
SSA-570294	9.9	Multiple Vulnerabilities in SICAM Q100 Before V2.50
SSA-568428	9.3	Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC
SSA-552702	8.8	Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products
SSA-506569	9.8	Multiple Vulnerabilities in SCALANCE W1750D
SSA-501891	9.6	Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
SSA-478960	6.5	Missing CSRF Protection in the Web Server Login Page of Industrial Controllers
SSA-459643	5.3	Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0
SSA-400332	9.0	Insufficient Design IP Protection in IEEE 1735 Recommended Practice – Impact to Questa and ModelSim
SSA-371761	6.6	Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3
SSA-362164	6.5	Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
SSA-120378	7.8	Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go