1,944 results · Clear filters · Feed
-
High
Siemens Simcenter STAR-CCM+ Viewer
Siemens Simcenter STAR-CCM+ Viewer is affected by a memory corruption vulnerability that could be triggered when the application reads scene (.sce) files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash,…
first Mar 8, 2022 -
High
Siemens COMOS
COMOS uses Drawings SDK from Open Design Alliance that is affected by multiple vulnerabilities that could be triggered when the application reads files in DGN, DXF or DWG file formats. If a user is tricked to open a malicious file with the affected applicatio…
first Mar 8, 2022 -
High
Siemens SINUMERIK MC
The NC plug-in card in SINUMERIK MC contains a privilege escalation vulnerability that could allow local attackers to escalate their privileges to root. This allows full access to the device, including read and modifying G code. Siemens has released updates f…
first Mar 8, 2022 -
High
Siemens SCALANCE W1700
Vulnerabilities have been identified in devices of the SCALANCE W-1700 (11ac) family that could allow an attacker to cause various denial of service conditions. Siemens has released updates for the affected products and recommends to update to the latest vers…
first Apr 12, 2022 -
High
Siemens Simcenter Femap
Siemens Simcenter Femap versions before V2022.1.2 are affected by vulnerabilities that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage …
first Apr 12, 2022 -
High
Siemens JT2GO and Teamcenter Visualization
Siemens has released updates for JT2Go and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as CGM, TIFF or TG4) with any of the affected products, this could lead the application to…
first May 10, 2022 -
High
Siemens SIMATIC CP 44x-1 RNA
Siemens has released a new version for the communication processor modules CP 44x-1 RNA that fixes a vulnerability that could allow an attacker to cause a denial of service condition. Siemens has released updates for the affected products and recommends to up…
first May 10, 2022 -
High max 7.5
Siemens Industrial Products
A vulnerability has been identified in the OPC Foundation Local Discovery Server (LDS) [0] of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released new versions for several …
first May 10, 2022 -
High
Siemens Simcenter Femap
Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attac…
first May 10, 2022 -
High max 7.8
Siemens Xpedition Designer
A vulnerability in Xpedition Designer could allow an attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released updates for the affected products and recommends to update …
first Jun 14, 2022 -
High max 8.6
Siemens SCALANCE and RUGGEDCOM Devices
The products listed below contain a denial of service vulnerability in the TCP event interface that could allow an unauthenticated remote attacker to render the device unusable. Siemens has released updates for the affected products and recommends to update t…
first Oct 11, 2022 -
High max 7.6
Siemens QMS Automotive
QMS Automotive contains a vulnerability that stores user credentials in plantext within the user database. This could allow an attacker to read credentials from memory. Siemens has released an update for QMS Automotive and recommends to update to the latest v…
first Nov 8, 2022 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF file with the affecte…
first Nov 8, 2022 -
High max 7.5
Siemens Multiple Denial of Service Vulnerabilities in Industrial Products
Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for the affected products and recommends to update to the lat…
first Dec 13, 2022 -
High max 7.6
Siemens SCALANCE Products
Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for the affec…
first Dec 13, 2022 -
High max 7.8
Siemens Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released an update for Simcen…
first Dec 13, 2022 -
High max 7.5
Siemens Parasolid
The openSSL component, versions 3.0.0 through 3.0.6, contains two buffer overflow vulnerabilities (CVE-2022-3602, CVE-2022-3786) in the X.509 certificate verification [0]. They could allow an attacker to create a denial of service condition or execute arbitra…
first Dec 13, 2022 -
High
Siemens SISCO MMS-EASE Third Party Component
A vulnerability in the third party component SISCO MMS-EASE could allow attackers to cause a denial of service condition with SIPROTEC 5 devices. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Dec 13, 2022 -
High max 8.8
Siemens APOGEE and TALON
APOGEE PXC / TALON TC field panels (BACnet before V3.5.5 and P2 Ethernet before V2.8.20) contain multiple vulnerabilities: - CVE-2022-45937: A privilege management vulnerability that could allow low privilege authenticated attackers to gain high privilege acc…
first Dec 13, 2022 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads a malicious file in CGM or RAS format. If a user is tricked to open a malicious file with the affected products…
first Dec 13, 2022 -
High max 7.5
Siemens APOGEE/TALON Field Panels
Successful exploitation of this vulnerability could allow an attacker to hijack existing sessions or spoof future sessions.
first Dec 15, 2022 -
High max 7.9
Siemens SIMATIC Industrial Products
Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update ("2022.3 IPU – B…
first Feb 14, 2023 -
High max 7.8
Siemens JT Open and JT Utilities
JT Open Toolkit and JT Utilities are affected by a memory corruption vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or…
first Apr 11, 2023 -
High max 7.8
Siemens in OPC Foundation Local Discovery Server
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and re…
first Apr 11, 2023 -
High max 7.5
Siemens Industrial Products
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver of an affected products to perform a denial of service attack. Siemens has released new versions for the affected products and recommen…
first Apr 11, 2023 -
High max 5.5
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by a memory corruption vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potent…
first Apr 11, 2023 -
High max 7.3
Siemens Mendix Forgot Password Module
Successful exploitation of the vulnerability could allow an attacker to retrieve sensitive information.
first Apr 18, 2023 -
High max 7.2
Siemens SIMATIC Cloud Connect 7
SIMATIC Cloud Connect 7 contains multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 9, 2023 -
High max 7.8
Siemens SIMATIC WinCC V7
SIMATIC WinCC V7 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges, if a non-default installation path was chosen during installation. Siemens has released an update for SIMATIC WinCC and recomme…
first Jun 13, 2023 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could l…
first Jun 13, 2023 -
High max 7.5
Siemens SiPass Integrated
SiPass integrated versions before V2.90.3.8 contain a stack overflow vulnerability that could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Siemens has released an update for SiPass integrate…
first Jul 11, 2023 -
High max 7.8
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application…
first Aug 8, 2023 -
High max 7.8
​Siemens JT Open, JT Utilities, and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application …
first Aug 8, 2023 -
High max 7.8
​Siemens Software Center
Multiple DLL Hijacking vulnerabilities in Siemens Software Center (SSC) could allow a local attacker to execute code with elevated privileges. Siemens has released an update for the Siemens Software Center and recommends to update to the latest version.
first Aug 8, 2023 -
High max 7.4
Siemens SIMATIC
Several SIMATIC products are affected by a type confusion vulnerability relating to OpenSSL X.400 address processing (CVE-2023-0286), as disclosed disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt. Siemens has released new versions f…
first Aug 8, 2023 -
High max 7.8
Siemens SICAM TOOLBOX II
SICAM TOOLBOX II contains two vulnerabilities that could allow local attackers to execute code on the system with elevated privileges. Siemens has released an update for SICAM TOOLBOX II and recommends to update to the latest version.
first Aug 8, 2023 -
High max 7.8
Siemens Parasolid
Parasolid is affected by out of bounds write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to …
first Sep 12, 2023 -
High max 8.8
Siemans QMS Automotive
QMS Automotive before V12.39 contains multiple vulnerabilities that could allow an attacker to perform malicious code injection, information disclosure or lead to a denial of service condition. Siemens has released an update for QMS Automotive and recommends …
first Sep 12, 2023 -
High max 8.2
Siemens Spectrum Power 7
Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code to the update script and escalate privileges. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest …
first Sep 14, 2023 -
High max 7.6
Siemens LOGO! and SIPLUS LOGO!
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject…
first Dec 12, 2023