NewsSiemens ProductCERT

    SSA-773256 V1.0: Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products

    A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process allowing a remote attacker to cause Denial-of-Service condition in the affected products. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

    Linked advisories

    Affected vendors and products

    Source: https://cert-portal.siemens.com/productcert/html/ssa-773256.html

    ID