Siemens ProductCERT has issued security advisories warning about critical vulnerabilities across multiple Siemens industrial products, including a severe flaw in the User Management Component (CVE-2024-33698). Users are urged to apply software updates and implement network filtering to mitigate potential exploits. #CVE202433698 #SiemensIndustrialSecurity
Keypoints
- Siemens has identified multiple critical security vulnerabilities affecting its industrial products.
- The most severe vulnerability (CVE-2024-33698) allows remote attackers to execute arbitrary code.
- Siemens recommends applying software updates and restricting network access via filtering ports 4002 and 4004.
- Other vulnerabilities include authentication bypasses, information disclosures, and XXE injection issues.
- Following Siemens’ security guidelines and maintaining timely patches are essential for operational safety.