1,944 results · Clear filters · Feed
-
High max 8.7ICSA-25-135-02 8 CVEs
Siemens INTRALOG WMS
INTRALOG WMS before V5 is affected by multiple vulnerabilities in the Microsoft .NET implementation as described below. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please approach your INTRALOG WMS conta…
-
High max 7.5ICSA-25-135-04 1 CVE
Siemens Desigo
Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected …
-
High max 7.8ICSA-25-135-06 1 CVE
Siemens Teamcenter Visualization
Siemens Teamcenter Visualization contains a out-of-bound read vulnerability that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
-
High max 8.8ICSA-25-135-08 2 CVEs
Siemens VersiCharge AC Series EV Chargers
VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware. Siemens has released new versions for several aff…
-
High max 8.8ICSA-25-135-12 1 CVE
Siemens SIMATIC PCS
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
-
High max 7.5ICSA-25-135-13 3 CVEs
Siemens SIRIUS
SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems only provide weak password obfuscation. An attacker with access to the PROFINET or serial interface of the device could eavesdrop or read the stored password from the device and de-obfuscate it. The sa…
-
High max 7.5ICSA-25-148-02 1 CVE
Siemens SiPass Integrated
SiPass integrated versions before V2.95.3.18 contain an out of bounds read vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition. Siemens has released a new version for SiPass integrated and recommends to up…
-
High max 8.4ICSA-25-128-01 1 CVE
Horner Automation Cscape
Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
-
High max 7.5ICSMA-25-128-01 3 CVEs
Pixmeo OsiriX MD
Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption, resulting in a denial-of-service condition or to steal credentials.
-
High
Siemens OPC UA Protocol Stack Discovery Service (Update E)
Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).
first Aug 30, 2017 -
High
Siemens SIPROTEC 4, SIPROTEC Compact, DIGSI 4, and EN100 Ethernet Module (Update D)
SIPROTEC 4 and SIPROTEC Compact devices could allow access authorization passwords to be reconstructed or overwritten via engineering mechanisms that involve DIGSI 4 and EN100 Ethernet communication modules. Siemens has released updates for several affected p…
first Mar 8, 2018 -
High
Siemens SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional, and SIMATIC NET PC Software (Update G)
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. …
first Mar 27, 2018 -
High max 7.5
Siemens SIMATIC, SIMOCODE, SINAMICS, SITOP, and TIM (Update I)
A vulnerability in the affected devices could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update …
first Apr 9, 2019 -
High max 7.5
Siemens Industrial Real-Time (IRT) Devices
A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released new versions for several affected products and recomme…
first Oct 8, 2019 -
High max 7.5
Siemens Industrial Products SNMP (Update F)
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released updates for several affected products and rec…
first Feb 11, 2020 -
High
Siemens SCALANCE S-600 (Update B)
The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affecte…
first Feb 11, 2020 -
High max 7.5
Siemens SCALANCE and SIMATIC (Update H)
The products listed below contain a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet w…
first Apr 14, 2020 -
High
Siemens SIMATIC, SINAMICS (Update C)
Multiple SIMATIC Software products are affected by two vulnerabilities that could allow an attacker to manipulate project files that may lead to Remote Code Execution or Denial-of-Service attacks. Siemens has released updates to some of the affected products …
first Jun 9, 2020 -
High
Siemens TIA Administrator (Update A)
The latest update for TIA Administrator, installed together with TIA Portal and PCS neo, fixes a privilege escalation vulnerability that could allow local users to escalate privileges and execute code as local SYSTEM user. Siemens has released updates for the…
first Feb 9, 2021 -
High
Open Design Alliance Drawings SDK (Update A)
Siemens has released version V13.1.0.1 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read files in different file formats (BMP, TIFF, CGM, TGA, PCT, HPG, PLT, RAS, PAR, ASM, DXF, DWG). If a us…
first Feb 9, 2021 -
High
Siemens SCALANCE and RUGGEDCOM Devices SSH (Update A)
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released updates for the affect…
first Mar 9, 2021 -
High max 6.5
Siemens SCALANCE and RUGGEDCOM Devices (Update A)
Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the …
first Mar 9, 2021 -
High
Siemens Solid Edge File Parsing
Siemens has released new versions for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT, XML extensions). If a user is tricked to open a malicious file with the affected app…
first Mar 9, 2021 -
High max 8.1
Siemens Nucleus Products DNS Module (Update A)
Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerabilities described in this advisory are from this set. The DNS client of the networking component (Nucleus N…
first Apr 13, 2021 -
High
Siemens Solid Edge File Parsing (Update A)
Siemens has released a new version for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT extensions). If a user is tricked to open a malicious file with the affected applica…
first Apr 13, 2021 -
High max 7.5
Siemens SINEMA Remote Connect Server
The latest update for SINEMA Remote Connect Server fixes two Denial-of-Service vulnerabilities in the underlying third-party XML parser. Siemens has released updates for the affected product and recommends to update to the latest versions.
first Apr 13, 2021 -
High
Siemens Tecnomatix RobotExpert
Siemens Tecnomatix RobotExpert version V16.1 fixes a vulnerability that could be triggered when the application reads CELL files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to …
first Apr 13, 2021 -
High
Siemens Mendix
The latest updates for Mendix fix a vulnerability in Mendix Applications that could allow malicious authorized users to escalate their privileges. Mendix has released an update for Mendix and recommends to update to the latest version.
first Apr 14, 2021 -
High
Siemens SIMATIC NET CP343-1
A vulnerability in SIMATIC CP343-1 devices could allow an attacker to cause a Denial-of-Service condition on TCP port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are …
first May 11, 2021 -
High
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation has released an update for version V16.0 that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this c…
first May 11, 2021 -
High
Siemens SCALANCE XM-400 and XR-500 Devices
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to create a permanent denial-of-service condition. Siemens has released updates for the affected products and re…
first May 11, 2021 -
High
Siemens SIMATIC S7-1500
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS…
first May 11, 2021 -
High
ICSA-21-040-06_Siemens JT2Go and Teamcenter Visualization (Update A)
Siemens has released version V13.1.0.2 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read files in ASM and PAR file formats. If a user is tricked to opening of a malicious file with the affect…
first May 17, 2021 -
High max 9.8
Siemens SIMATIC S7-1200 and S7-1500 CPU Families (Update A)
SIMATIC S7-1200 and S7-1500 CPU products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks. Siemens has released updates fo…
first May 28, 2021 -
High
Siemens Mendix SAML Module
The latest update of Mendix SAML module fixes a privilege escalation vulnerability. Mendix has released an update for the Mendix SAML module and recommends to update to the latest version.
first Jun 8, 2021 -
High
Siemens TIM 1531 IRC
The latest update for TIM 1531 IRC fixes a vulnerability that could allow a remote attacker to cause a denial-of-service under certain circumstances. Siemens has released an update for the TIM 1531 IRC and recommends to update to the latest version.
first Jun 8, 2021 -
High
Siemens Solid Edge
Siemens has released a new version for Solid Edge to fix two vulnerabilities that could be triggered when the application read files in DFT file format. If a user is tricked to opening of a malicious file with the affected products, this could lead to applica…
first Jun 8, 2021 -
High
Siemens SIMATIC TIM libcurl
SIMATIC TIM 1531 IRC devices are vulnerable to multiple vulnerabilities in the third party component libcurl that could allow an attacker to extract sensitive information and pass a revoked certificate as valid. Siemens has released an update for SIMATIC TIM …
first Jun 8, 2021 -
High
Siemens Simcenter Femap
Siemens Simcenter Femap is affected by two vulnerabilities that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitr…
first Jun 8, 2021 -
High
Siemens SIMATIC RFID (Update B)
The latest updates for SIMATIC RF products fix a vulnerability that could allow an unauthorized attacker to crash the OPC UA service of the affected devices. Siemens has released updates for the affected products and recommends to update to the latest version…
first Jun 8, 2021