Siemens ProductCERT Patch Day — January 2023
Tuesday, 10 January 2023
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 2
All vulnerabilities 9
Critical2 ShowHide
High6 ShowHide
-
High 8.5
CVE-2022-45093 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (…EPSS 1.3%
-
High 8.4
CVE-2022-45094 A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker with access to the Web Based Management (…EPSS 1.5%
-
High 8.2
CVE-2022-43513 A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl …EPSS 1%
- High 7.8
- High 7.8
-
High 7.7
CVE-2022-43514 A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl …EPSS 1.7%