SIEMENS-SSA-566773 · Published 2018-06-12 · View on Siemens ProductCERT ↗

SSA-566773 (Last Update: 2018-06-12): Vulnerabilities in Building Technologies Products

CVSS N/A MEDIUM

Risk Summary

<p>The License Management System (LMS), which is used by multiple Siemens' building automation products, includes a vulnerable version of Gemalto Sentinel LDK RTE. Gemalto Sentinel LDK RTE is affected by two vulnerabilities that could allow denial-of-service and a cross-site-scripting vulnerability.</p> <p>Siemens recommends updating the affected dongle driver.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-566773 (Last Update: 2018-06-12): Vulnerabilities in Building Technologies Products See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more