NCSC-2024-0433

Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

• Denial-of-Service (DoS)
• Cross-Site-Scripting (XSS)
• Manipulatie van gegevens
• Omzeilen van een beveiligingsmaatregel
• Omzeilen van authenticatie
• (Remote) code execution (Administrator/Root rechten)
• (Remote) code execution (Gebruikersrechten)
• Toegang tot systeemgegevens
• Verhoogde gebruikersrechten

De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.

medium

high

Unchecked Input for Loop Condition

Use of a Cryptographic Primitive with a Risky Implementation

Misinterpretation of Input

Insufficient Technical Documentation

Improperly Controlled Sequential Memory Allocation

Truncation of Security-relevant Information

CWE-310

Use of Weak Hash

Improper Validation of Specified Quantity in Input

Exposure of Sensitive Information Due to Incompatible Policies

Policy Privileges are not Assigned Consistently Between Control and Data Agents

Incorrect Provision of Specified Functionality

Missing Release of Resource after Effective Lifetime

Observable Timing Discrepancy

Insertion of Sensitive Information Into Sent Data

Excessive Iteration

Incorrect Privilege Assignment

Permissive Cross-domain Policy with Untrusted Domains

Privilege Dropping / Lowering Errors

Incorrect Permission Assignment for Critical Resource

Improper Locking

Expected Behavior Violation

Improper Validation of Certificate with Host Mismatch

Missing Encryption of Sensitive Data

Improper Check for Unusual or Exceptional Conditions

Reachable Assertion

Uncontrolled Search Path Element

Cleartext Transmission of Sensitive Information

Insufficient Session Expiration

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

Observable Discrepancy

Improper Validation of Integrity Check Value

Missing Cryptographic Step

Integer Overflow or Wraparound

Use of Hard-coded Cryptographic Key

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Out-of-bounds Read

Improper Resource Shutdown or Release

CWE-275

Improper Access Control

Improper Restriction of Operations within the Bounds of a Memory Buffer

Inefficient Regular Expression Complexity

Use After Free

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')

Missing Release of Memory after Effective Lifetime

NULL Pointer Dereference

Improper Certificate Validation

Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Improper Control of Generation of Code ('Code Injection')

Use of a Broken or Risky Cryptographic Algorithm

Interpretation Conflict

Uncontrolled Resource Consumption

Allocation of Resources Without Limits or Throttling

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Deserialization of Untrusted Data

Server-Side Request Forgery (SSRF)

Incorrect Authorization

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Out-of-bounds Write

Exposure of Sensitive Information to an Unauthorized Actor

Heap-based Buffer Overflow

Stack-based Buffer Overflow

Memory Allocation with Excessive Size Value

Improper Privilege Management

Improper Input Validation

Improper Authentication

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')