Skip to content
OpenAdvisories
Critical SSA-734552 1 CVE

SSA-734552: Buffer Overflow Vulnerability in OpenSSL Affecting Desigo CC

Published Jul 14, 2026 · Updated Jul 14, 2026

Vendor: Siemens Product: Desigo CC family V7 Product: Desigo CC family V8 Product: Desigo CC family V9

Summary

OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.

Vulnerabilities 1

  • High 8.8
    CVE-2025-15467 Public exploit EPSS 75%

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #1

    Publication Date

References