Summary
Siemens heeft kwetsbaarheden verholpen in diverse producten als Desigo, Parasolid, RUGGEDCOM, SIMATIC, Siveillance en Solid Edge.
Details
Interpretaties
De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- (Remote) code execution (root/admin rechten)
- (Remote) code execution (gebruikersrechten)
- Toegang tot gevoelige gegevens
- Verhogen van rechten
De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen
Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Vulnerabilities 20
-
Critical 10.0CVE-2026-58115 Public exploit
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running I…
-
Critical 9.1
Remote Code Execution by administrative user on the Management Server
Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API. The vulnerability causes users with edit permissions to the Management Server to be able to execute arbitrary c…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All vers…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606)…
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains …
-
High 7.8
A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001). The affected applications contains …
-
High 7.8
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.…
-
High 7.5
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is …
-
Medium 6.8
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products use a static, hardcode…
-
Medium 6.8
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affe…
-
Medium 6.1
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerab…
-
Medium 6.0
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1). The affected application is …
-
Medium 5.0
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.…
-
Medium 4.3
A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01…
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-069220.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-077553.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-127084.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-138516.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-584312.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-621657.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-751328.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-781903.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-825228.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-834709.html