CVE-2024-23816 Information

Description

A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3) Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3) Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3) Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3) Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3) Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3) Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3) Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3). Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

https://cert-portal.siemens.com/productcert/html/ssa-580228.html

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

9.8