Siemens SIMATIC S7: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.3
  CVE-2024-46887

  The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' …

  Siemens SIMATIC S7-1500 CPU 1515TF-2 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC S7-1500 CPU 1513-1 PN Windows ICS / OT
  Oct 8, 2024
• Medium 4.7
  CVE-2024-46886

  The web server of affected devices does not properly validate input that is used for a user redirection. This could all…

  Siemens SIMATIC S7-1500 CPU 1511-1 PN SIMATIC S7-1500 CPU 1511F-1 PN SIMATIC S7-1500 CPU 1515F-2 PN Windows ICS / OT
  Oct 8, 2024

Revision history

1. 2024-10-07 #1

   Initiale Fassung

References

• Siemens Security Advisory by Siemens ProductCERT vom 2024-10-07
  https://cert-portal.siemens.com/productcert/html/ssa-054046.html
• Siemens Security Advisory by Siemens ProductCERT vom 2024-10-07
  https://cert-portal.siemens.com/productcert/html/ssa-876787.html