Summary
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information).
Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user.
Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings within the open Industrial Edge ecosystem. See further details about affected Industrial Edge Devices in the Additional Information section.
Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 1
-
Critical 9.8
A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device …
Revision history
-
#3
Clarified no more fixes planned for Industrial Edge Device Kit version lines V1.17, V1.18 and V1.19
-
#2
Clarified that this advisory pertains to the Industrial Edge Device Kit only and that version lines can be updated
-
#1
Publication Date
References
-
SSA-819629: Weak Authentication Vulnerability in Industrial Edge Device Kit - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-819629.html