Description
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Industrial Edge Management Pro | < V1.9.5 | V1.9.5 |
| Siemens | Industrial Edge Management Virtual | < V2.3.1-1 | V2.3.1-1 |
Advisories 3
- NCSC-2024-0362 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 10, 2024
- ICSA-24-256-11 Siemens Industrial Edge Management CISA ICS & IT advisories · Sep 10, 2024
- SSA-359713 SSA-359713: Authorization Bypass Vulnerability in Industrial Edge Management Siemens ProductCERT · Sep 10, 2024