Summary
OZW672 and OZW772 Web Server versions contain vulnerabilities that could allow an attacker to execute arbitrary code on the device with root privileges (in versions before V8.0) or to authenticate as Administrator user (in versions before V6.0).
Siemens has released new versions for the affected products and recommends to update to the latest versions.
Vulnerabilities 2
-
Critical 10.0
A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in a…
-
Critical 9.8
A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of a…
Revision history
-
#1
Publication Date
References
-
SSA-047424: Code Execution and SQL Injection Vulnerabilities in OZW Web Servers - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-047424.html