Siemens Security Snafu: Mendix Studio Pro Vulnerability Unzipped!
CISA is leaving Siemens ICS security advisories hanging, like an unresolved cliffhanger, as of January 2023. For the latest on Siemens product vulnerabilities, check Siemens’ ProductCERT Security Advisories. Remember, just because it’s not updated, doesn’t mean it’s not vulnerable!
Hot Take:
Looks like Siemens is offering a new twist on “path to success” with their Mendix Studio Pro vulnerability! Just when you thought you could traverse through life without a hitch, here comes a zip path traversal vulnerability to keep you on your toes. Time to zip it up, Siemens!
Key Points:
- Siemens Mendix Studio Pro has a path traversal vulnerability.
- Versions affected range from Mendix Studio Pro 8 to 11.
- The vulnerability allows writing or modifying arbitrary files outside project directories.
- Siemens has released updates and advised against installing untrusted modules.
- No known public exploitation has been reported yet.
Already a member? Log in here