Review - Siemens Publishes Out-of-Zone Advisory – 2-17-25

Today, Siemens published an out-of-zone advisory that discusses a path traversal vulnerability in their SiPass integrated product. This is a third-party (DotNetZip) vulnerability. Siemens has new versions that mitigate the vulnerability.

 

For more information on the vulnerability, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/siemens-publishes-out-of-zone-advisory-228 - subscription required.