Summary
Siveillance Identity contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 3
-
Unscored —
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …
-
Unscored —
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …
-
Unscored —
A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), …
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-463116.txt
-
SSA-463116: Multiple Access Control Vulnerabilities in Siveillance Identity before V1.6.284.0 - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-463116.pdf
-
ICS Advisory ICSA-21-350-14 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-350-14
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B