CVE-2024-45032 — Siemens / Industrial Edge Management Pro

CVE-2024-45032

Siemens / Industrial Edge Management Pro PUBLISHED

Description (CNA)

A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.

Affected (CNA)

Vendor / product	Versions
Siemens / Industrial Edge Management Pro	affected 0 before V1.9.5
Siemens / Industrial Edge Management Virtual	affected 0 before V2.3.1-1

CWE

CWE-639

References

https://cert-portal.siemens.com/productcert/html/ssa-359713.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.