Summary
meta-iot2050 (https://github.com/siemens/meta-iot2050) from V01.03.01 contains a Command Injection vulnerability in the firmware update tool that could allow an attacker which is able to manipulate a configuration file to have arbitrary commands run as root.
Siemens is preparing fixes and recommends mitigations for products where fixes are not or not yet available.
Vulnerabilities 1
-
High 7.3
A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a con…
Revision history
-
#1
Publication Date
References
-
SSA-724261: Command Injection Vulnerability in meta-iot2050 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-724261.html