Summary
Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges.
Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions still under maintenance and recommends countermeasures for products where fixes are not, or not yet available.
Vulnerabilities 4
-
High 8.2
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Con…
-
High 7.8
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 Domain Con…
-
High 7.5
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (…
-
High 7.2CVE-2024-38878 EPSS 11%
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (…
Revision history
-
#2
Added additional affected Omnivise T3000 Releases R8.2 SP3 and SP4, corrected inconsistent information, added reference to SE Controls Security Announcement 2024-01
-
#1
Publication Date
References
-
SSA-857368: Multiple Vulnerabilities in Omnivise T3000 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-857368.html