-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

# SSA-622535: Multiple Vulnerabilities in Teamcenter Active Workspace

Publication Date:        2021-07-13
Last Update:             2021-07-13
Current Version:         1.0
CVSS v3.1 Base Score:    6.1

SUMMARY
=======

Multiple vulnerabilities affecting Teamcenter Active Workspace could
lead to sensitive information disclosure and reflected cross site
scripting.

Siemens has released updates for the affected products and recommends to
update to the latest versions.


AFFECTED PRODUCTS AND SOLUTION
==============================


* Teamcenter Active Workspace V4 
  - Affected versions:
       All versions < V4.3.9
  - Remediation:
       Update to V4.3.9 or later version
  - Download:
       https://support.sw.siemens.com/ (login required)

* Teamcenter Active Workspace V5.0 
  - Affected versions:
       All versions < V5.0.7
  - Remediation:
       Update to V5.0.7 or later version
  - Download:
       https://support.sw.siemens.com/ (login required)

* Teamcenter Active Workspace V5.1 
  - Affected versions:
       All versions < V5.1.4
  - Remediation:
       Update to V5.1.4 or later version
  - Download:
       https://support.sw.siemens.com/ (login required)


WORKAROUNDS AND MITIGATIONS
===========================

Siemens has identified the following specific workarounds and mitigations that
customers can apply to reduce the risk:

* Avoid to open untrusted files from unknown sources in Teamcenter Active
Workspace



GENERAL SECURITY RECOMMENDATIONS
================================

As a general security measure, Siemens strongly recommends to protect
network access to devices with appropriate mechanisms. In order to
operate the devices in a protected IT environment, Siemens recommends to
configure the environment according to Siemens' operational guidelines
for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security),
and to follow the recommendations in the product manuals.

Additional information on Industrial Security by Siemens can be found
at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION
===================

Teamcenter Active Workspace is a web application for accessing the
Teamcenter system that provides an identical and seamless experience on
any computer or smart device.

VULNERABILITY CLASSIFICATION
============================

The vulnerability classification has been performed by using the CVSS scoring
system in version 3.1 (CVSS v3.1) (https://www.first.org/cvss/). The CVSS
environmental score is specific to the customer's environment and will impact
the overall CVSS score. The environmental score should therefore be
individually defined by the customer to accomplish final scoring.

An additional classification has been performed using the CWE classification, a
community-developed list of common software security weaknesses. This serves as
a common language and as a baseline for weakness identification, mitigation,
and prevention efforts. A detailed list of CWE classes can be found at:
https://cwe.mitre.org/.



* Vulnerability CVE-2021-33711

  The affected application allows verbose error messages which allow
  leaking of sensitive information, such as full paths.

  CVSS v3.1 Base Score: 5.3
  CVSS Vector:          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
  CWE:                  CWE-209: Generation of Error Message Containing Sensitive Information

* Vulnerability CVE-2021-33710

  A reflected cross-site scripting (XSS) vulnerability exists in the web
  interface of the affected devices that could allow an attacker to
  execute malicious JavaScript code by tricking users into accessing a
  malicious link.

  CVSS v3.1 Base Score: 6.1
  CVSS Vector:          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
  CWE:                  CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site
Scripting')

* Vulnerability CVE-2021-33709

  By sending malformed requests, a remote attacker could leak an
  application token due to an error not properly handled by the system.

  CVSS v3.1 Base Score: 4.3
  CVSS Vector:          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
  CWE:                  CWE-200: Exposure of Sensitive Information to an Unauthorized Actor




ADDITIONAL INFORMATION
======================

For further inquiries on security vulnerabilities in Siemens products and
solutions, please contact the Siemens ProductCERT:

https://www.siemens.com/cert/advisories


HISTORY DATA
============

V1.0 (2021-07-13): Publication Date

TERMS OF USE
============

Siemens Security Advisories are subject to the terms and conditions contained
in Siemens' underlying license terms or other applicable agreements previously
agreed to with Siemens (hereinafter "License Terms"). To the extent applicable
to information, software or documentation made available in or through a
Siemens Security Advisory, the Terms of Use of Siemens' Global Website
(https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in
particular Sections 8-10 of the Terms of Use, shall apply additionally. In case
of conflicts, the License Terms shall prevail over the Terms of Use.
-----BEGIN PGP SIGNATURE-----
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=IKLn
-----END PGP SIGNATURE-----