10.0
Critical
CVE-2024-45032 A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge…
Description
A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validate the device tokens. This could allow an unauthenticated remote attacker to impersonate other devices onboarded to the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Industrial Edge Management Pro 1.9 | earliest → < 1.9.5 | 1.9.5 |
| Industrial Edge Management Virtual 2.3 | earliest → < 2.3.1-1 | 2.3.1-1 |
| industrial_edge_management_pro 1.9 | earliest → < 1.9.5 | 1.9.5 |
| industrial_edge_management_virtual 2.3 | earliest → < 2.3.1-1 | 2.3.1-1 |
References
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified