Summary
SIMATIC eaSie contains multiple vulnerabilities that could allow an
attacker to send arbitrary messages to the underlying message passing
framework of the affected system or crash the attached application.
Siemens has released an update for the SIMATIC eaSie Core Package and
recommends to update to the latest version.
Vulnerabilities 2
-
Unscored —
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not …
-
Unscored —
A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service …
Revision history
-
#2
Clarified that eaSie Core Package is affected
-
#1
Publication Date
References
-
SSA-580125: Multiple Vulnerabilities in SIMATIC eaSie - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-580125.pdf
-
SSA-580125: Multiple Vulnerabilities in SIMATIC eaSie - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-580125.txt