Summary
Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Critical 9.1
Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass
A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for a…
Revision history
-
#2
Initial CISA Republication of Siemens ProductCERT SSA-503852 advisory
-
#1
Publication Date
References
-
SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Management - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-503852.html
-
ICS Advisory ICSA-26-265-06 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-06
-
Recommended Practices
https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b