« Volver al listado

CVE-2024-23816

Estado: ModificadaCrítica (9.8)—

A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3).

Leer descripción completaMostrar menos

Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Siemens — Location Intelligence

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-23816",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-23816",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-08T18:42:02.272695Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "productcert@siemens.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "productcert@siemens.com",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "Location Intelligence Perpetual Large",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence Perpetual Medium",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence Perpetual Non-Prod",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence Perpetual Small",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence SUS Large",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence SUS Medium",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence SUS Non-Prod",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "Location Intelligence SUS Small",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V4.3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-02-13T09:15:50.343",
  "references": [
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-580228.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "productcert@siemens.com"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-580228.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "productcert@siemens.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3). Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en: \nLocation Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (Todas las versiones &lt; V4.3), \nLocation Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (Todas las versiones &lt; V4.3), \nLocation Intelligence Perpetual Non -Prod (9DE5110-8CA10-1AX0) (todas las versiones &lt; V4.3), \nLocation Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (todas las versiones &lt; V4.3), \nLocation Intelligence SUS Large (9DE5110-8CA13-1BX0) ( Todas las versiones &lt; V4.3), \nLocation Intelligence SUS Medium (9DE5110-8CA12-1BX0) (Todas las versiones &lt; V4.3), \nLocation Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (Todas las versiones &lt; V4.3), \nLocation Intelligence SUS Small (9DE5110-8CA11-1BX0) (Todas las versiones &lt; V4.3). \nLos productos afectados utilizan un valor secreto codificado para el cálculo de un código de autenticación de mensaje hash con clave. Esto podría permitir que un atacante remoto no autenticado obtenga acceso administrativo completo a la aplicación."
    }
  ],
  "lastModified": "2026-06-17T07:13:39.917",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:siemens:location_intelligence:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30C51EBA-660C-4920-89FB-5A72F545E737",
              "versionEndExcluding": "4.3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "productcert@siemens.com"
}