Summary
The latest update for SINEMA Server fixes a vulnerability that could allow an unauthenticated attacker to obtain encoded system configuration backup files under certain conditions.
Siemens has released an update for the SINEMA Server and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SINEMA Server (All versions < V14 SP3). Missing authentication for functionality…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-835377: Missing Authentication Vulnerability in SINEMA Server - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-835377.txt
-
SSA-835377: Missing Authentication Vulnerability in SINEMA Server - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-835377.pdf
-
ICS Advisory ICSA-21-257-12 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-257-12
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B