Our takeSiemens ICSA-26-295-04 discloses an out-of-bounds read in Capital Embedded AR Classic that can trigger abnormal behavior, instability, or DoS. Update to R20-11 or later and apply the listed mitigations.Security Resilience desk
Sources (1)
- cisa_advisories · cisa_advisories
What this means for you — Security leader:Update Siemens Capital Embedded AR Classic to R20-11 or later; if you cannot patch immediately, restrict network access to affected engineering workstations and monitor for anomalous behavior.
What this means for you — Lean IT orgs:If you use Siemens Capital Embedded AR Classic for product design or manufacturing, update it to the newest version as soon as possible or limit who can reach it on your network.
What this means for you — MSP:Check every client running Siemens Capital Embedded AR Classic and schedule the R20-11 update; apply network segmentation or access controls on any system that cannot be patched right away.
What this means for you — Researcher:Siemens Capital Embedded AR Classic R20-11 and earlier contain a confirmed out-of-bounds read that can lead to instability or denial of service; patch or isolate affected instances.