Summary
Siemens heeft kwetsbaarheden verholpen in diverse producten zoals SIMATIC en COMOS.
Details
Interpretaties
De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Manipulatie, wijziging of verwijdering van gegevens
- Omzeilen van beveiligingsmaatregelen
- Omzeilen van authenticatie
- Ongeautoriseerde toegang tot systemen en gevoelige gegevens
- (Remote) code execution met gebruikersrechten
- (Remote) code execution met root-/administratorrechten
- Verhogen van rechten
Oplossingen
Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Zie de bijgevoegde referenties voor meer informatie.
Vulnerabilities 7
-
Critical 9.2
Out-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …
KEV Oct 27, 2026 -
High 8.8
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…
-
High 8.2
A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of me…
-
High 7.5
A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions…
-
High 7.3
A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a con…
-
Medium 5.4
A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11…
-
Low 2.1
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, …
Revision history
-
#1.0.0
Initiele versie
References
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-045512.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-242944.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-435267.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-443410.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-651988.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-678870.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-710379.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-724261.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-898633.html
-
Reference
https://cert-portal.siemens.com/productcert/html/ssa-970803.html