Skip to content
OpenAdvisories
Critical ICSA-26-209-01 1 CVE

Siemens Desigo CC

Published Jul 14, 2026 · Updated Jul 28, 2026 · Revision 2

Vendor: Siemens Product: Desigo CC family V7 Product: Desigo CC family V8 Product: Desigo CC family V9

Summary

OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 8.8
    CVE-2025-15467 Public exploit EPSS 75%

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #2

    Initial CISA Republication of Siemens ProductCERT SSA-734552 advisory

  2. #1

    Publication Date

References