Description (CNA)
Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that the attacker has learned the identity of a legitimate user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / Industrial Edge Cloud Device (IECD) | affected 0 before V1.24.2 |
| Siemens / Industrial Edge Device Kit - arm64 V1.10 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.11 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.12 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.13 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.14 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.15 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.16 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.17 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.18 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.19 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.20 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.21 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.22 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.23 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.24 | affected 0 before V1.24.2 |
| Siemens / Industrial Edge Device Kit - arm64 V1.25 | affected 0 before V1.25.1 |
| Siemens / Industrial Edge Device Kit - arm64 V1.5 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.6 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.7 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.8 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - arm64 V1.9 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.10 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.11 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.12 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.13 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.14 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.15 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.16 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.17 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.18 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.19 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.20 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.21 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.22 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.23 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.24 | affected 0 before V1.24.2 |
| Siemens / Industrial Edge Device Kit - x86-64 V1.25 | affected 0 before V1.25.1 |
| Siemens / Industrial Edge Device Kit - x86-64 V1.5 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.6 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.7 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.8 | affected 0 before * |
| Siemens / Industrial Edge Device Kit - x86-64 V1.9 | affected 0 before * |
| Siemens / Industrial Edge Own Device (IEOD) | affected 0 before V1.24.2 |
| Siemens / Industrial Edge Virtual Device (IEVD) | affected 0 before V1.24.2 |
| Siemens / SCALANCE LPE9413 | affected 0 before V2.2 |
| Siemens / SCALANCE LPE9433 | affected 0 before V2.2 |
| Siemens / SIMATIC Automation Workstation 19" | affected 0 before V1.3 |
| Siemens / SIMATIC Automation Workstation 24" | affected 0 before V1.3 |
| Siemens / SIMATIC HMI MTP1000 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1000 Unified Comfort Panel hygienic | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1000, Unified Comfort Panel neutral | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Unified Comfort Panel hygienic | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1200 Unified Comfort Panel neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Unified Comfort Panel hygienic | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1500 Unified Comfort Panel neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Unified Comfort Panel hygienic | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP1900 Unified Comfort Panel neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extensio | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Unified Comfort Hygienic | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP2200 Unified Comfort Panel neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP700 Unified Comfort Panel | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design | affected 0 before V21 |
| Siemens / SIMATIC HMI MTP700, Unified Comfort Panel neutral design | affected 0 before V21 |
| Siemens / SIMATIC IOT2050 | affected 0 before V1.25.1 |
| Siemens / SIMATIC IPC BX-39A Industrial Edge Device | affected 0 before V3.1 |
| Siemens / SIMATIC IPC BX-59A Industrial Edge Device | affected 0 before V3.1 |
CWE
CWE-639
References
- https://cert-portal.siemens.com/productcert/html/ssa-014678.html
- https://cert-portal.siemens.com/productcert/html/ssa-001536.html
ADP enrichment
No English description supplied.
No references supplied.