vulnerability
Siemens SIPROTEC 5
Critical
Summary
This CISA advisory details a critical vulnerability in Siemens SIPROTEC 5 devices due to the use of insufficiently random session identifiers. An unauthenticated remote attacker could potentially exploit this weakness to hijack user sessions and gain unauthorized access to limited information. Siemens has released fix versions and recommends countermeasures for affected products, highlighting the need for immediate action to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data