Summary
A vulnerability was found in SINUMERIK Edge that could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.
Siemens has released an update for the SINUMERIK Edge and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly va…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-523250: Improper Certificate Validation Vulnerability in SINUMERIK Edge - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-523250.txt
-
SSA-523250: Improper Certificate Validation Vulnerability in SINUMERIK Edge - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-523250.pdf
-
ICS Advisory ICSA-21-350-09 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-350-09
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B