Description
A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIPORT MP | All versions < 3.1.4 | — |
Advisories 1
- ICSA-20-042-08 Siemens SIPORT MP CISA ICS & IT advisories · Feb 11, 2020