vulnerability
Siemens gWAP
High
Summary
A remote code execution vulnerability has been identified in Siemens gWAP, stemming from a prototype pollution issue within the Axios HTTP client library. This vulnerability, exploitable through a ‘Gadget’ attack chain, could allow an attacker to execute arbitrary code and potentially compromise the system. Siemens has released version 3.1.1 to address this issue, and CISA recommends updating to the latest version and implementing network security best practices to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data