SSA-692317 V1.0: Authorization Bypass Vulnerability in Industrial Edge

Risk Summary

<p>The latest update for Industrial Edge fixes a vulnerability that could allow an unauthenticated attacker to change the password of any user in the system. With this an attacker could impersonate any valid user on an affected system.</p> <p>Siemens has released updates for the affected products and recommends to update to the latest versions.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)