description: A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3). Affected products use a hard-coded secret value for the computation of a Keyed-Hash Message Authentication Code. This could allow an unauthenticated remote attacker to gain full administrative access to the application.
problem types: CWE-798: Use of Hard-coded Credentials
affected:
{
vendor: Siemens
product: Location Intelligence Perpetual Large
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence Perpetual Medium
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence Perpetual Non-Prod
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence Perpetual Small
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence SUS Large
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence SUS Medium
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence SUS Non-Prod
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
{
vendor: Siemens
product: Location Intelligence SUS Small
versions:
status: affected, version: 0, lessThan: V4.3, versionType: custom
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 9.8
baseSeverity: CRITICAL
]