Summary
Multiple vulnerabilities affecting Teamcenter Active Workspace could lead to sensitive information disclosure and reflected cross site scripting.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 3
-
Unscored —
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Worksp…
-
Unscored —
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Worksp…
-
Unscored —
A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Worksp…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-622535.txt
-
SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-622535.pdf
-
ICS Advisory ICSA-21-194-11 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-194-11
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B