Description
A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44), Climatix POL909 (AWM module) (All versions < V11.36). The handling of log files in the web application of affected devices contains an information disclosure vulnerability which could allow logged in users to access sensitive files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Climatix POL909 (AWB module) | All versions < V11.44 | — |
| Siemens | Climatix POL909 (AWM module) | All versions < V11.36 | — |
Advisories 2
- ICSA-22-069-07 Siemens Climatix POL909 CISA ICS & IT advisories · May 6, 2025
- SSA-252466 SSA-252466: Multiple Vulnerabilities in Climatix POL909 (AWM and AWB) Siemens ProductCERT · Mar 8, 2022