-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# SSA-589975 Improper Access Control Vulnerability in CoreShield OWG Software

Publication Date:        2022-09-13
Last Update:             2022-09-13
Current Version:         1.0
CVSS v3.1 Base Score:    7.8


SUMMARY
=======

The default installation of the Windows version of the CoreShield One-
Way Gateway (OWG) software sets insecure file permissions that could
allow a local attacker to escalate privileges to local administrator.
Siemens Mobility has released an update for the CoreShield OWG
software and recommends to update to the latest version.


AFFECTED PRODUCTS AND SOLUTION
==============================


* CoreShield One-Way Gateway (OWG) Software 
  - Affected versions:
       All versions < V2.2
  - Remediation:
       Update to V2.2 or later version

       See further recommendations from section "Workarounds and Mitigations"
  - Download:
       Contact your Siemens Mobility customer service organization to obtain the update


WORKAROUNDS AND MITIGATIONS
===========================

Siemens Mobility has identified the following specific workarounds and mitigations that
customers can apply to reduce the risk:

  * Install CoreShield OWG software on a dedicated machine
  * Migrate the operating system (OS) of the affected machines to Linux
  * Remove modify and write permissions from installed executables for local users

Product-specific remediations or mitigations can be found in the section
"Affected Products and Solution".


Please follow the "General Security Recommendations".


GENERAL SECURITY RECOMMENDATIONS
================================

As a general security measure Siemens Mobility strongly recommends to
protect network access to affected products with appropriate
mechanisms. It is advised to follow recommended security practices in
order to run the devices in a protected IT environment.


PRODUCT DESCRIPTION
===================

The CoreShield One-Way Gateway (OWG) software enables unidirectional
exchange of information between network zones of varying levels of
security.

VULNERABILITY CLASSIFICATION
============================

The vulnerability classification has been performed by using the CVSS scoring
system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS
environmental score is specific to the customer's environment and will impact
the overall CVSS score. The environmental score should therefore be
individually defined by the customer to accomplish final scoring.

An additional classification has been performed using the CWE classification, a
community-developed list of common software security weaknesses. This serves as
a common language and as a baseline for weakness identification, mitigation,
and prevention efforts. A detailed list of CWE classes can be found at:
https://cwe.mitre.org/.



* Vulnerability CVE-2022-38466

  The default installation sets insecure file permissions that could
  allow a local attacker to escalate privileges to local
  administrator.

    CVSS v3.1 Base Score: 7.8
    CVSS Vector:          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
    CWE:                  CWE-284: Improper Access Control


ACKNOWLEDGMENTS
===============

Siemens Mobility thanks the following parties for their efforts:

   * Abian Blome and Michael Messner from Siemens Energy for reporting the vulnerability


ADDITIONAL INFORMATION
======================

For further inquiries on security vulnerabilities in Siemens Mobility products and
solutions, please contact the Siemens ProductCERT:

https://www.siemens.com/cert/advisories


HISTORY DATA
============

V1.0 (2022-09-13): Publication Date

TERMS OF USE
============

Siemens Mobility Security Advisories are subject to the terms and conditions contained
in Siemens Mobility' underlying license terms or other applicable agreements previously
agreed to with Siemens Mobility (hereinafter "License Terms"). To the extent applicable
to information, software or documentation made available in or through a
Siemens Mobility Security Advisory, the Terms of Use of Siemens' Global Website
(https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in
particular Sections 8-10 of the Terms of Use, shall apply additionally. In case
of conflicts, the License Terms shall prevail over the Terms of Use.

Copyright: Siemens Mobility 2022
-----BEGIN PGP SIGNATURE-----
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=hHGw
-----END PGP SIGNATURE-----