Summary
Multiple Siemens products are affected by improper certificate validation in IAM Client. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
High 7.4
A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), NX V…
Revision history
-
#3
CISA Republication update based on Siemens ProductCERT SSA-868571 advisory
-
#4
CISA Republication update based on Siemens ProductCERT SSA-868571 advisory
-
#2
Added fix for COMOS V10.6
-
#1
Publication Date
References
-
SSA-868571: Missing Server Certificate Validation in IAM Client - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-868571.html
-
ICS Advisory ICSA-25-345-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-04
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b