1,185 results · Clear filters · Feed
-
Critical max 9.8ICSA-25-140-10 2 CVEs
Vertiv Liebert RDU101 and UNITY
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or achieve remote code execution
-
Critical max 9.8ICSA-25-140-06 1 CVE
Schneider Electric PrismaSeT Active - Wireless Panel Server
Schneider Electric is aware of a vulnerability disclosed in the Silicon Labs Gecko Bootloader used in the PrismaSet Active - Wireless Panel Server. The PrismaSeT Active - Wireless Panel Server https://www.se.com/ww/en/product-range/39982243-prismaset-p-active…
-
Critical max 9.8
Siemens RUGGEDCOM APE1808
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM A…
first Apr 9, 2024 -
Critical max 9.8
Siemens Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains a weak authentication vulnerability that could f…
first Apr 8, 2025 -
Critical max 10.0ICSA-25-135-10 2 CVEs
Siemens OZW Web Servers
OZW672 and OZW772 Web Server versions contain vulnerabilities that could allow an attacker to execute arbitrary code on the device with root privileges (in versions before V8.0) or to authenticate as Administrator user (in versions before V6.0). Siemens has r…
-
Critical max 9.8
Siemens Desigo PXC (Update C)
Several Desigo PXC/PXM devices contain a vulnerability that could allow unauthenticated remote attackers to upload malicious firmware without prior authentication. Siemens has released updates for the affected products and recommends to update to the latest v…
first Jan 24, 2018 -
Critical
Siemens SPPA-T3000 (Update A)
SPPA-T3000 Application Server and MS3000 Migration Server are affected by multiple vulnerabilities. Some of the vulnerabilities can allow an attacker to execute arbitrary code on the server. Exploitation of the vulnerabilities described in this advisory requi…
first Dec 10, 2019 -
Critical
Siemens Products using TightVNC (Update A)
Multiple TightVNC (V1.x) vulnerabilities could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has previously released this advisory containing a set of products that were considered to be affected. Through Siemens'…
first Dec 8, 2020 -
Critical
Siemens SCALANCE X Products (Update B)
Several SCALANCE X switches contain vulnerabilities in the web server of the affected devices. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulne…
first Jan 12, 2021 -
Critical
Siemens Web Server of SCALANCE X200 (Update A)
Several SCALANCE X-200 switches contain buffer overflow vulnerabilities in the web server. In the most severe case an attacker could potentially remotely execute code. Siemens is preparing updates and recommends specific countermeasures for products where upd…
first Apr 13, 2021 -
Critical
Siemens and Milestone Siveillance Video Open Network Bridge
Siemens has released hotfixes for Siveillance Video Open Network Bridge (ONVIF) which fix a security vulnerability related to unsecure storage of ONVIF user credentials. The vulnerability could allow an authenticated remote attacker to retrieve and decrypt al…
first Apr 13, 2021 -
Critical max 9.8
Siemens SINAMICS Medium Voltage Products Remote Access (Update B)
SINAMICS medium voltage products, with Sm@rtServer enabled on SIMATIC comfort HMI Panels, are affected by multiple vulnerabilities that could allow an attacker, under certain conditions, to gain full remote access to the HMI. Note that by default Sm@rtServer …
first May 11, 2021 -
Critical
Siemens SIMATIC UltraVNC HMI WinCC Products
UltraVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to update to…
first May 11, 2021 -
Critical max 9.8
Siemens SIMATIC SmartVNC HMI WinCC Products (Update B)
Multiple SmartVNC vulnerabilities in the affected products listed below could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest ver…
first May 11, 2021 -
Critical
Siemens SCALANCE W1750D (Update B)
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or trigger buffer overflows. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 11, 2021 -
Critical max 3.7
Siemens SIMATIC NET CP 443-1 OPC UA
All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
first Jun 8, 2021 -
Critical
Wibu-Systems CodeMeter Runtime
WIBU Systems published information about two vulnerabilities and an associated fix release version of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerabilities are described in the s…
first Jul 13, 2021 -
Critical
Siemens Energy AGT and SGT Solutions
One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products: - Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems - Aeroderivative Gas Turbines SGT-A2…
first Aug 10, 2021 -
Critical max 9.8
Siemens APOGEE and TALON
A buffer overflow vulnerability in the integrated web server of multiple APOGEE and TALON automation devices could allow a remote attacker to execute arbitrary code on the devices with root privileges. Affected devices include the APOGEE MBC/MEC/PXC P2 Ethern…
first Sep 14, 2021 -
Critical
Siemens SIPROTEC 5 relays (Update A)
The latest update for SIPROTEC 5 relays fixes two vulnerabilities that could allow a remote attacker to cause a denial-of-service or potentially trigger a remote code execution under certain circumstances. Siemens has released an update for SIPROTEC 5 relays …
first Sep 14, 2021 -
Critical
Siemens Desigo CC Family
Desigo CC, Desigo CC Compact and Cerberus DMS that use CCOM communication component hosted in IIS contain a deserialisation vulnerability that could allow an unauthenticated attacker to perform remote code execution. Only those systems that use Windows App an…
first Sep 14, 2021 -
Critical
Siemens Siveillance OIS
The Siveillance Open Interface Services (OIS) application used for integration of different subsystems to several Siemens building management systems contains a command injection vulnerability that could allow a remote unauthenticated attacker to execute code…
first Sep 14, 2021 -
Critical
Siemens SIMATIC Process Historian
The latest update for SIMATIC Process Historian (PH) fixes an authentication vulnerability in the configuration interface of redundant PH instances that could enable the execution of admin operations on the database. The related vulnerable interface is restri…
first Oct 12, 2021 -
Critical max 8.2
Siemens Nucleus RTOS TCP/IP Stack
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for seve…
first Nov 9, 2021 -
Critical max 8.2
Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products …
first Nov 9, 2021 -
Critical
Siemens POWER METER SICAM Q100
POWER METER SICAM Q100 contains a vulnerability that could allow an attacker to remotely execute code. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Dec 14, 2021 -
Critical max 8.8
Siemens SIMATIC ITC
Multiple LibVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to up…
first Dec 14, 2021 -
Critical
Siemens SICAM A8000
SICAM A8000 devices are impacted by two vulnerabilities. The first one could allow a privileged user to enable a debug port with default credentials. The second vulnerability could allow unauthenticated access to certain previously created log files. Siemens …
first Jan 11, 2022 -
Critical
Siemens SINEMA Mendix Forgot Password Appstore
Mendix Forgot Password Appstore module contains two vulnerabilities that could allow unauthorized users to take over accounts. Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.
first Mar 8, 2022 -
Critical max 9.8
Siemens SINEC INS
71 vulnerabilities in third-party components as Node.js, cURL, SQLite, CivetWeb and DNS(ISC BIND) could allow an attacker to interfere with the affected product in various ways. Siemens has released an update for SINEC INS and recommends to update to the late…
first Mar 8, 2022 -
Critical
Siemens SCALANCE X-300 Switches
Several SCALANCE X-300 switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial of service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has relea…
first Apr 12, 2022 -
Critical
Siemens SIMATIC Energy Manager
SIMATIC Energy Manager is affected by multiple vulnerabilities that could allow an attacker to gain local privilege escalation, local code execution or remote code execution. Siemens has released updates for the affected products and recommends to update to t…
first Apr 12, 2022 -
Critical max 9.8
Siemens SICAM P850 and SICAM P855
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemen…
first May 10, 2022 -
Critical max 9.6
Siemens SCALANCE X Switch Devices
Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released …
first Jul 12, 2022 -
Critical max 9.9
Siemens SICAM P850 and P855 Devices
Session fixation and multiple incorrect parameter parsing vulnerabilities that could potentially lead to remote code execution were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and r…
first Oct 11, 2022 -
Critical max 9.1
Siemens Mendix SAML Module
The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to upd…
first Mar 14, 2023 -
Critical max 9.8
Siemens SCALANCE XCM332
Multiple vulnerabilities in the third-party components cURL, BusyBox, libtirpc, Expat as well as in the Linux Kernel could allow an attacker to impact the SCALANCE XCM332 device's confidentiality, integrity and availability. Siemens has released an update for…
first Apr 11, 2023 -
Critical max 9.8
Siemens SINEC NMS Third-Party
Multiple vulnerabilities affecting third-party components libexpat and libcurl of SINEC NMS before V1.0.3.1 could allow an attacker to impact SINEC NMS confidentiality, integrity and availability. Siemens has released an update for SINEC NMS and recommends to…
first May 9, 2023 -
Critical max 9.9
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
first May 9, 2023 -
Critical max 9.9
Siemens SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to …
first Jun 13, 2023