Description
A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). The default installation sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | CoreShield One-Way Gateway (OWG) Software | All versions < V2.2 | — |
Advisories 2
- ICSA-22-258-01 Siemens Mobility CoreShield OWG Software CISA ICS & IT advisories · Sep 13, 2022
- SSA-589975 SSA-589975 Improper Access Control Vulnerability in CoreShield OWG Software Siemens ProductCERT · Sep 13, 2022