Description
A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | PowerSys | < V3.11 | V3.11 |
Advisories 3
- NCSC-2024-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 11, 2024
- ICSA-24-165-07 Siemens PowerSys CISA ICS & IT advisories · Jun 11, 2024
- SSA-024584 SSA-024584: Authentication Bypass Vulnerability in PowerSys before V3.11 Siemens ProductCERT · Jun 11, 2024