ICSA-22-223-02 — Siemens Teamcenter

Summary

Teamcenter is affected by two security vulnerabilities in the File
Service Cache service that could lead to command injection and denial
of service issues. Siemens has released updates for the affected
products and recommends to update to the latest versions.

Vulnerabilities 2

Medium 6.8

CVE-2022-34660

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V13.0 Teamcenter V12.4 Teamcenter V13.2 ICS / OT

Aug 10, 2022
Medium 6.5

CVE-2022-34661

A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V…

Siemens Teamcenter V12.4 Teamcenter V13.0 Teamcenter V13.1 ICS / OT

Aug 10, 2022

Revision history

2022-08-09 #1
Publication Date

References

SSA-759952: Command Injection and Denial of Service Vulnerability in Teamcenter - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-759952.txt
SSA-759952: Command Injection and Denial of Service Vulnerability in Teamcenter - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-759952.pdf
ICS Advisory ICSA-22-223-02 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-223-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B