High ICSA-21-350-16 3 CVEs

Siemens Healthineers syngo fastView (Update A)

Published Dec 16, 2021 · Updated Feb 10, 2022 · Revision 2

Vendor: Siemens Healthineers, Siemens Product: Syngo fastView

Summary

Successful exploitation of these vulnerabilities could lead to a crash of the application or arbitrary code execution.

Vulnerabilities 3

High 7.8

CVE-2021-40367

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation …

Siemens syngo fastView ICS / OT

Jan 4, 2024
High 7.8

CVE-2021-42028

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation …

Siemens syngo fastView ICS / OT

Jan 4, 2024
High 7.8

CVE-2021-45465

A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation …

Siemens syngo fastView ICS / OT

Jan 4, 2024

Revision history

2022-02-10 #2
ICSA-21-350-16 Siemens Healthineers syngo fastView (Update A)
2021-12-16 #1
ICSA-21-350-16 Siemens Healthineers syngo fastView

References

ICS Advisory ICSA-21-350-16 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-350-16
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B