CISA has published an advisory on cleartext storage of sensitive information and exposure of information through directory listing vulnerabilities in Siemens Spectrum Power. All versions prior to v4.70 SP8 are affected. Successful exploitation of these vulnerabilities could allow an unauthorized attacker to retrieve a list of software users, or in certain cases to list the contents of a directory. Siemens has released updates and configuration recommendations for Spectrum Power 4 to mitigate the issues. CISA also recommends a series of measures to mitigate the vulnerabilities. Read the advisory at CISA.
You are here
Related Resources
Aug 22, 2024 in Cybersecurity, in Federal & State Resources
Aug 22, 2024 in Cybersecurity, in Security Preparedness
Aug 22, 2024 in Cybersecurity, in OT-ICS Security, in Federal & State Resources