Locate control system networks and remote devices behind firewalls and isolate them from business networks.Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the Internet.It is advised to follow recommended security practices to run the devices in a protected IT environment.įor more information see, Siemens security advisory SSA-836027 in HTML or CSAF.ĬISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability these vulnerabilities. Siemens recommends users implement workarounds and mitigations for the affected products to reduce risk.Īs a general security measure, Siemens strongly recommends protecting network access to affected products with appropriate mechanisms. Siemens reported this vulnerability to CISA. CRITICAL INFRASTRUCTURE SECTORS: Multiple.A CVSS v3 base score of 9.8 has been calculated the CVSS vector string is ( AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.ĬVE-2022-33139 has been assigned to this vulnerability. The following versions of Siemens management stations are affected:ģ.2 VULNERABILITY OVERVIEW 3.2.1 USE OF CLIENT-SIDE AUTHENTICATION CWE-603Īll versions of Siemens Desigo CC and Cerberus DMS use client-side authentication when neither server-side authentication nor Kerberos authentication is enabled. Successful exploitation of this vulnerability could allow an attacker to impersonate other users or exploit the client-server protocol without being authenticated. Vulnerability: Use of Client-Side Authentication.ATTENTION: Exploitable remotely/low attack complexity.

Desigo cc download