Kwetsbaarheden verholpen in Siemens producten

Summary

Details

Vulnerabilities 41

• High 7.8
  CVE-2026-31431 Exploited Public exploit EPSS 98%

  crypto: algif_aead - Revert to operating out-of-place

  In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

  Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
  Apr 22, 2026

  KEV May 1, 2026
• Critical 9.8
  CVE-2026-62645

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web int…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• Critical 9.1
  CVE-2026-18963 Public exploit Scanner template

  Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

  A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for a…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6 Wolfi Maven
  Aug 18, 2026
• Critical 9.0
  CVE-2026-50093

  A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control …

  Siemens Siveillance Control Pro V3.0 Siveillance Control V3.0 Siveillance Control Pro V4.0 ICS / OT
  Sep 8, 2026
• High 8.8
  CVE-2025-15467 Public exploit EPSS 75%

  Stack buffer overflow in CMS (Auth)EnvelopedData parsing

  Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 27, 2026
• High 8.8
  CVE-2026-62650

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the we…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• High 8.6
  CVE-2026-67367

  A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All…

  Siemens SIMOVE Fleetmanager V3.2 SIMOVE Fleetmanager V4.0 SIPLANT V2.2 ICS / OT
  Sep 8, 2026
• High 8.2
  CVE-2024-42386

  Use of Out-of-range Pointer Offset in Mongoose Web Server library

  Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

  Cesanta Software Mongoose Web Server
  Nov 18, 2024
• High 8.2
  CVE-2024-56181

  A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07…

  Siemens SIMATIC IPC647E SIMATIC IPC847E SIMATIC IPC BX-21A ICS / OT
  Mar 11, 2025
• High 8.2
  CVE-2024-56182

  A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.1…

  Siemens SIMATIC IPC847E SIMATIC IPC647E SIMATIC IPC RW-543A ICS / OT
  Mar 11, 2025
• High 8.2
  CVE-2025-47809

  Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or re…

  Wibu CodeMeter
  May 16, 2025
• High 8.2
  CVE-2026-34223

  A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All…

  Siemens Desigo CC ClickOnce Client V7 Desigo CC family V9 Desigo CC Flex Client V7 ICS / OT
  Sep 8, 2026
• High 7.8
  CVE-2025-30033

  The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code whe…

  Siemens SIMATIC BATCH V9.1 SIMATIC NET PC Software V16 SIMATIC NET PC Software V17 Windows ICS / OT
  Aug 12, 2025
• High 7.8
  CVE-2025-40574

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• High 7.8
  CVE-2025-40582

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• High 7.5
  CVE-2024-42384

  Integer Overflow or Wraparound in Mongoose Web Server library

  Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

  Cesanta Software Mongoose Web Server
  Nov 18, 2024
• High 7.5
  CVE-2026-62648

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained …

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• High 7.5
  CVE-2026-62649

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or …

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• High 7.4
  CVE-2026-62646

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• High 7.4
  CVE-2026-62647

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to gener…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• High 7.2
  CVE-2026-54801

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

  Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT
  Jul 9, 2026
• High 7.1
  CVE-2025-40581

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 6.8
  CVE-2026-62653

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary comm…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• Medium 6.8
  CVE-2026-62654

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activate…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• Medium 6.7
  CVE-2025-40579

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 6.7
  CVE-2025-40580

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 6.7
  CVE-2026-54799

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

  Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT
  Jul 9, 2026
• Medium 6.5
  CVE-2026-54798

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

  Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT
  Jul 9, 2026
• Medium 6.1
  CVE-2026-58113

  A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V…

  Siemens Teamcenter V2412 Teamcenter V2512 Teamcenter V2506 ICS / OT
  Sep 8, 2026
• Medium 5.5
  CVE-2025-40572

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 5.3
  CVE-2026-62652

  A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from…

  Siemens Reyrolle 7SR5 ICS / OT
  Sep 8, 2026
• Medium 4.8
  CVE-2026-54800

  A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.20), SICORE Base sys…

  Siemens CPCI85 Central Processing/Communication SICORE Base system ICS / OT
  Jul 9, 2026
• Medium 4.4
  CVE-2025-40573

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.4
  CVE-2025-40583

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remot…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.3
  CVE-2024-42391

  Use of Out-of-range Pointer Offset in Mongoose Web Server library

  Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

  Cesanta Software Mongoose Web Server
  Nov 18, 2024
• Medium 4.3
  CVE-2025-40575

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.3
  CVE-2025-40576

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.3
  CVE-2025-40577

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected device…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.3
  CVE-2025-40578

  A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions). Affected devices do not pr…

  Siemens SCALANCE LPE9403 ICS / OT
  May 13, 2025
• Medium 4.0
  CVE-2024-42385

  Improper Neutralization of Delimiters in Mongoose Web Server library

  Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

  Cesanta Software Mongoose Web Server
  Nov 18, 2024
• Medium 4.0
  CVE-2024-42392

  Improper Neutralization of Delimiters in Mongoose Web Server library

  Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters.

  Cesanta Software Mongoose Web Server
  Nov 18, 2024

Revision history

1. 2026-09-08 #1.0.1

   Inschaling stond abusievelijk op Medium/Medium, is aangepast naar Medium/High.

2. 2026-09-08 #1.0.0

   Initiele versie

References

• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-142885.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-157465.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-216014.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-229470.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-254516.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-282044.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-327438.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-328642.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-330084.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-331739.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-434797.html
• Reference
  https://cert-portal.siemens.com/productcert/html/ssa-503852.html