ICSA-21-147-04
·
Published 2021-05-27
·
View on CISA ICS-CERT ↗
Siemens JT2Go and Teamcenter Visualization
CVSS 7.8
HIGH
Risk Summary
Successful exploitation of these vulnerabilities could lead to arbitrary code execution or information leakage.
Remediations
- Update to V13.1.0.2 or later version
- Avoid to open untrusted files from unknown sources in JT2Go and Teamcenter Visualization
- As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Affected Vendors
Siemens
Affected Products (2)
Siemens
·
JT2Go
< V13.1.0.2
Siemens
·
Teamcenter Visualization
< V13.1.0.2
Affected Sectors
Critical Manufacturing
Get alerted to advisories like this
OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.
Start free trial Learn more