Summary
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Low 3.7
A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < …
Revision history
-
#2
Initial CISA Republication of Siemens ProductCERT SSA-981622 advisory
-
#1
Publication Date
References
-
SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-981622.html
-
ICS Advisory ICSA-26-111-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-111-04
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b