Siemens SINEC NMS Multiple Vulnerabilities Security Advisory (SSA-331112)

SSA-331112: Multiple Vulnerabilities in SINEC NMS Before V3.0 SP1 Key Information from the Webpage Screenshot: 1. Publication Date: - 2024-11-12 2. Last Update: - 2024-11-12 3. Current Version: - V1.0 4. CVSS v3.1 Base Score: - 8.4 5. CVSS v4.0 Base Score: - 8.3 6. Summary: - SINEC NMS versions prior to V3.0 SP1 are affected by multiple vulnerabilities. - Siemens has released a new version for SINEC NMS and recommends updating to the latest version. 7. Affected Products and Solution: - Affected Product and Versions: - SINEC NMS - All versions < V3.0 SP1 - Remediation: - Update to V3.0 SP1 or later - https://support.industry.siemens.com/cs/www/en/view/109974917/ 8. Workarounds and Mitigations: - Product-specific remediations or mitigations are available in the "Affected Products and Solution" section. - Please follow the General Security Recommendations. 9. General Security Recommendations: - Siemens recommends protecting network access to devices using appropriate mechanisms. - To operate devices in a protected IT environment, configure the environment according to Siemens’ operational guidelines for Industrial Security. - Additional information on Siemens’ Industrial Security can be found at: https://www.siemens.com/industrialsecurity 10. Product Description: - This section describes all vulnerabilities (CVE-IDs) addressed in this security advisory. - Documents the product-specific impact of each individual vulnerability. 11. Vulnerability Description: - Un-/Collapse All 12. Additional Information: - For further inquiries regarding security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT: https://www.siemens.com/cert/advisories 13. History Data: - V1.0 (2024-11-12): Publication Date 14. Terms of Use: - The use of Siemens Security Advisories is subject to the terms and conditions listed at: https://www.siemens.com/productcert/terms-of-use

Goal Reached Thanks to every supporter — we hit 100%!

Siemens SINEC NMS Multiple Vulnerabilities Security Advisory (SSA-331112)