Summary
The default installation of the Windows version of the CoreShield One-
Way Gateway (OWG) software sets insecure file permissions that could
allow a local attacker to escalate privileges to local administrator.
Siemens Mobility has released an update for the CoreShield OWG
software and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). The default ins…
Revision history
-
#1
Publication Date
References
-
SSA-589975 Improper Access Control Vulnerability in CoreShield OWG Software - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-589975.pdf
-
SSA-589975 Improper Access Control Vulnerability in CoreShield OWG Software - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-589975.txt