Summary
The latest update for Industrial Edge fixes a vulnerability that could allow an unauthenticated attacker to change the password of any user in the system. With this an attacker could impersonate any valid user on an affected system.
Siemens has released updates for the affected products and recommends to update to the latest versions.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker co…
Revision history
-
#1
Publication Date
References
-
SSA-692317: Authorization Bypass Vulnerability in Industrial Edge - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-692317.pdf
-
SSA-692317: Authorization Bypass Vulnerability in Industrial Edge - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-692317.txt