NewsSiemens ProductCERT

    SSA-693808 V1.0: Deserialization Vulnerability in Siemens Engineering Platforms

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within…

    Teilen

    Teaser aus der Quelle

    Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arbitrary code within…

    Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.

    Artikel bei Siemens ProductCERT lesen

    Mehr zu SSA-693808

    Weitere Advisories

    Quelle: https://cert-portal.siemens.com/productcert/html/ssa-693808.html

    ID