Summary
Multiple vulnerabilities have been identified in the Climatix POL909 (AWM and AWB) that could allow an unauthenticated attacker to hijack and redirect users to a malicious webpage, or allow an authenticated attacker to access sensitive files.
Siemens has released an update for the Climatix POL909 (AWM and AWB) and recommends to update to the latest version.
Vulnerabilities 3
-
Unscored —
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM modul…
-
Unscored —
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM modul…
-
Unscored —
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM modul…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-252466: Multiple Vulnerabilities in Climatix POL909 (AWM and AWB) - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-252466.txt
-
SSA-252466: Multiple Vulnerabilities in Climatix POL909 (AWM and AWB) - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-252466.pdf
-
ICS Advisory ICSA-22-069-07 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-069-07
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B