Description
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. This could allow an unauthenticated attacker in an on-path position to to read and modify any data passed over the connection between legitimate clients and the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Location Intelligence family | < V4.4 | V4.4 |
Advisories 3
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-07 Siemens Location Intelligence CISA ICS & IT advisories · Aug 13, 2024
- SSA-720392 SSA-720392: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4 Siemens ProductCERT · Aug 13, 2024