Description
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce restriction of excessive authentication attempts. This could allow an unauthenticated remote attacker to conduct brute force attacks against legitimate user passwords.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Location Intelligence family | < V4.4 | V4.4 |
Advisories 3
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-07 Siemens Location Intelligence CISA ICS & IT advisories · Aug 13, 2024
- SSA-720392 SSA-720392: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4 Siemens ProductCERT · Aug 13, 2024