Authentication Bypass Vulnerability in Industrial Edge Device Kit by Siemens

CVE-2024-54092

What is CVE-2024-54092?

A security issue exists in the Industrial Edge Device Kit, where devices fail to properly enforce user authentication on certain API endpoints when identity federation is in use. This vulnerability can allow an unauthenticated remote attacker to bypass security measures and impersonate a legitimate user. Successful exploitation necessitates that identity federation is currently or was previously enabled, as well as knowledge of a legitimate user's identity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References