Medium SSA-794542 1 CVE

SSA-794542: Insecure Folder Permissions in SIMARIS Configuration

Published Feb 9, 2021 · Updated May 11, 2021 · Revision 2

Vendor: Siemens Product: SIMARIS configuration

Summary

The installation of SIMARIS configuration causes insecure folder permissions that could allow vertical privilege escalation.

Siemens has released an update for SIMARIS and recommends to update to the latest version.

Vulnerabilities 1

Unscored —

CVE-2020-28392

A vulnerability has been identified in SIMARIS configuration (All versions < V4.0.1). During installation to default ta…

Siemens SIMARIS configuration ICS / OT

Feb 9, 2021

Revision history

2021-05-11 #2
Added solution
2021-02-09 #1
Publication Date

References

SSA-794542: Insecure Folder Permissions in SIMARIS Configuration - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-794542.pdf
SSA-794542: Insecure Folder Permissions in SIMARIS Configuration - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-794542.txt