Cybersecurity · 64 views
Siemens gWAP
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library.
Summary
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The vulnerability stems from a specific "Gadget" attack chain that allows prototype pollution in other third-party libraries, potentially allowing an attacker to execute arbitrary code. Siemens has released a new version for gWAP and recommends to update to the latest version.
AI summaries can be wrong sometimes—always verify important details using the source article.
How AI & Automation are usedMore from Cybersecurity
Continue reading recent Cybersecurity coverage
- Microsoft Patches More Than 1,400 Security FlawsContinue reading
- Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company SayContinue reading
- OpenAI engineer arrested for allegedly planting spy device in officeContinue reading
- Zero-Days Lurk in Microsoft's Overgrown October Patch TuesdayContinue reading
Support HappeningNow
Independent AI-powered news analysis is reader-supported. Your contribution helps cover infrastructure, summaries, and continued platform development.
Support HappeningNow