all InfoSec news
SSA-766247 V1.1 (Last Update: 2022-01-11): Authentication Vulnerability in SIMATIC Process Historian
Siemens ProductCERT Security Advisories cert-portal.siemens.com
The latest update for SIMATIC Process Historian (PH) fixes an authentication vulnerability in the configuration interface of redundant PH instances that could enable the execution of admin operations on the database.
The related vulnerable interface is restricted to local access on recent versions starting from SIMATIC Process Historian 2020.
Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
access admin authentication configuration database enable fixes historian interface latest local operations process restricted simatic ssa update vulnerability vulnerable