FlagThis

References :

• cert-portal.siemens.com: Siemens Security Advisory for SSA-654798
• cert-portal.siemens.com: Siemens Security Advisory for SSA-914892
• cwe.mitre.org: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
• cwe.mitre.org: CWE-863 Incorrect Authorization
• www.cisa.gov: CISA advisory details vulnerability in Siemens SIMATIC CP
• www.cisa.gov: CISA advisory details vulnerability in Siemens Mendix Runtime

Classification:

• HashTags:
• Company: Siemens
• Target: SIMATIC CP
• Product: SIMATIC CP
• Feature: authorization handling
• Type: Vulnerability
• Severity: Major