Ssa 968435

The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the management server and execute arbitrary code (RCE) on the local machine through Node.js integration.

Siemens has released an update for the Industrial Edge App Publisher and recommends to update to the latest version.

Product-specific remediations or mitigations can be found in the section Known Affected Products . Please follow the General Security Recommendations .

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: ), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at:

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: ), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at:

Industrial Edge App Publisher packages Docker images into Industrial Edge Apps for deployment on Industrial Edge Devices

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Siemens thanks the following party for its efforts:

Ezinne Kalu for reporting and coordinated disclosure