High SSA-901508 8 CVEs

SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5

Published May 13, 2025 · Updated May 13, 2025

Vendor: Siemens Product: INTRALOG WMS

Summary

INTRALOG WMS before V5 is affected by multiple vulnerabilities in the Microsoft .NET implementation as described below.

Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version.
Please approach your INTRALOG WMS contact to resolve the reported vulnerabilities for your solution. When contacting your Siemens representative, kindly reference the Siemens Security Advisory ID (SSA-901508).

Vulnerabilities 8

High 8.7

CVE-2024-0056

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

Microsoft Microsoft SQL Server 2022 (GDR) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Alpine NuGet

Jan 9, 2024
High 8.1

CVE-2024-35264

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine NuGet

Jul 9, 2024
High 7.5

CVE-2024-20672

.NET Denial of Service Vulnerability

.NET Denial of Service Vulnerability

Microsoft .NET 6.0 .NET 7.0 dotnet8-runtime Alpine

Jan 9, 2024
High 7.5

CVE-2024-30105

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine Wolfi NuGet

Jul 9, 2024
High 7.5

CVE-2024-38095

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.8 Ubuntu Alpine Wolfi NuGet

Jul 9, 2024
High 7.5

CVE-2024-43483

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Ubuntu Alpine NuGet

Oct 8, 2024
High 7.5

CVE-2024-43485

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2022 version 17.8 .NET 6.0 Ubuntu Alpine NuGet

Oct 8, 2024
High 7.3

CVE-2024-38081

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Ubuntu Alpine NuGet

Jul 9, 2024

Revision history

2025-05-13 #1
Publication Date

References

SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5 - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-901508.html