4,105 results · Feed
-
Medium
Siemens Mendix Studio Pro
Applications built with affected versions of Mendix Studio Pro do not properly control read or write access for certain client actions. This could allow authenticated attackers to manipulate the content of System.FileDocument objects or to retrieve the change…
first Nov 9, 2021 -
Critical max 8.2
Siemens Nucleus RTOS-based APOGEE and TALON Products (Update C)
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products …
first Nov 9, 2021 -
High
Siemens NX OBJ Translator
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads OBJ files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary …
first Nov 9, 2021 -
High
Siemens SENTRON powermanager
SENTRON powermanager V3 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released a security patch for SENTRON powermanager V3.6 HF1 and recommends to update to the latest version a…
first Nov 9, 2021 -
Medium
Siemens SIMATIC RTLS Locating Manager
SIMATIC RTLS Locating Manager before V2.12 contains multiple vulnerabilities that could allow an attacker to read sensitive data or trigger a denial-of-service condition of the application service. Siemens has released an update for the SIMATIC RTLS Locating …
first Nov 9, 2021 -
Low
Siemens NX JT Translator
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads JT files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary c…
first Nov 9, 2021 -
High
Siemens Siveillance Video DLNA Server
Siemens has released hotfixes for Siveillance Video DLNA Server, which fix a path traversal vulnerability that could allow an authenticated remote attacker to access sensitive information on the DLNA server. Siemens has released updates for the DLNA server an…
first Nov 9, 2021 -
High max 8.2
Siemens Capital VSTAR
Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embed…
first Dec 14, 2021 -
Critical
Siemens POWER METER SICAM Q100
POWER METER SICAM Q100 contains a vulnerability that could allow an attacker to remotely execute code. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Dec 14, 2021 -
High
Siemens JTTK and JT Utilities
JT Open Toolkit (JTTK) before V11.0.3.0 contains multiple vulnerabilities that could be triggered when the affected product reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V13.0.3.0. If a user is tricked to open a m…
first Dec 14, 2021 -
High
Siemens SINUMERIK Edge
A vulnerability was found in SINUMERIK Edge that could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server. Siemens has released an update for the SINUMERIK Edge and recommends to upd…
first Dec 14, 2021 -
High max 7.8
Siemens JT2Go and Teamcenter Visualization
Siemens has released version V13.2.0.5 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read maliciously crafted files in different file formats (PDF, JT, TIFF, CGM and TIF). If a user is tricked…
first Dec 14, 2021 -
Medium
Siemens SIMATIC eaSie PCS 7 Skill Package
SIMATIC eaSie PCS 7 Skill Package contains a path traversal vulnerability that could allow an authenticated remote attacker to read arbitrary files for the application server. Siemens has released an update for the SIMATIC eaSie PCS 7 Skill Package and recomm…
first Dec 14, 2021 -
Critical max 8.8
Siemens SIMATIC ITC
Multiple LibVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to up…
first Dec 14, 2021 -
High
Siemens Siveillance Identity
Siveillance Identity contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released updates for the affected products and recommends to update to the lates…
first Dec 14, 2021 -
High
Siemens Simcenter STAR-CCM+ Viewer
Siemens Simcenter STAR-CCM+ Viewer is affected by a vulnerability that could be triggered when the application reads scene (.sce) files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially a…
first Dec 14, 2021 -
High
Siemens JT Utilities and JT Open Toolkit
JT Open Toolkit (JTTK) before V11.1.1.0 contains multiple vulnerabilities that could be triggered when it reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V13.1.1.0. If a user is tricked to open a malicious JT file w…
first Dec 14, 2021 -
Medium
Siemens Teamcenter Active Workspace
A zip path traversal vulnerability in Teamcenter Active Workspace could allow an attacker to achieve remote code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Dec 14, 2021 -
High
Siemens SiPass Integrated
SiPass integrated contains multiple vulnerabilities that could allow an unauthenticated remote attacker to access or modify several internal application resources. Siemens has released a tool, "SiPass integrated Component Manager", to remediate the vulnerabil…
first Dec 14, 2021 -
High
Siemens JTTK and JT Utilities
JT Open Toolkit (JTTK) before V10.8.1.1 contains multiple vulnerabilities that could be triggered when it reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V12.8.1.1. If a user is tricked to open a malicious file with…
first Dec 14, 2021 -
Critical
Siemens SICAM A8000
SICAM A8000 devices are impacted by two vulnerabilities. The first one could allow a privileged user to enable a debug port with default credentials. The second vulnerability could allow unauthenticated access to certain previously created log files. Siemens …
first Jan 11, 2022 -
High max 8.2
Siemens Energy PLUSCONTROL
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. PLUSCONTROL 1…
first Jan 11, 2022 -
Medium
Siemens SIPROTEC 5 Devices
An information disclosure vulnerability in SIPROTEC 5 products could allow an unauthenticated attacker to read device information. Only devices with the hardware variants CP050, CP100 and CP300 are affected. The DIGSI engineering tool can be used to identify …
first Jan 11, 2022 -
High max 8.8
Siemens COMOS Web (Update A)
Multiple vulnerabilities were identified in the web components of COMOS that could allow an attacker to conduct code injections, store data in undesired locations, execute arbitrary SQL statements, and run cross-site request forgery attacks. Siemens has relea…
first Jan 11, 2022 -
Low
Siemens SICAM PQ Analyzer
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability. Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
first Jan 11, 2022 -
High max 7.5
Siemens SIMATIC Industrial Products (Update A)
Affected SIMATIC firmware contains three vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the la…
first Feb 8, 2022 -
High
Siemens Simcenter Femap
Siemens Simcenter Femap is affected by multiple vulnerabilities that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability …
first Feb 8, 2022 -
Medium
Siemens SINEMA Remote Connect Server
An open redirect vulnerability in SINEMA Remote Connect Server could allow an attacker to steal logon credentials with a specially crafted malicious link. Siemens has released software update for the SINEMA Remote Connect Server and recommends to update to th…
first Feb 8, 2022 -
Medium
Siemens Spectrum Power 4
A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4. Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.
first Feb 8, 2022 -
High
Siemens Simcenter Femap
Siemens Simcenter Femap versions before V2022.1.1 are affected by vulnerabilities that could be triggered when the application reads files in .NEU or .BDF format. If a user is tricked to open a malicious file with the affected application, an attacker could l…
first Feb 17, 2022 -
High max 8.2
Siemens SIMOTICS CONNECT 400
Multiple vulnerabilities (also known as “NUCLEUS:13”) have been identified in the Nucleus RTOS (real-time operating system), originally reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. SIMOT…
first Mar 8, 2022 -
Critical
Siemens SINEMA Mendix Forgot Password Appstore
Mendix Forgot Password Appstore module contains two vulnerabilities that could allow unauthorized users to take over accounts. Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.
first Mar 8, 2022 -
High
Siemens Simcenter STAR-CCM+ Viewer
Siemens Simcenter STAR-CCM+ Viewer is affected by a memory corruption vulnerability that could be triggered when the application reads scene (.sce) files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash,…
first Mar 8, 2022 -
High
Siemens COMOS
COMOS uses Drawings SDK from Open Design Alliance that is affected by multiple vulnerabilities that could be triggered when the application reads files in DGN, DXF or DWG file formats. If a user is tricked to open a malicious file with the affected applicatio…
first Mar 8, 2022 -
Medium
Siemens Climatix POL909
Multiple vulnerabilities have been identified in the Climatix POL909 (AWM and AWB) that could allow an unauthenticated attacker to hijack and redirect users to a malicious webpage, or allow an authenticated attacker to access sensitive files. Siemens has rele…
first Mar 8, 2022 -
Medium
Siemens Polarion ALM
The Subversion Webclient in Polarion ALM contains a cross-site scripting vulnerability, that could be triggered by an attacker by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Subversion Webclient in Po…
first Mar 8, 2022 -
Critical max 9.8
Siemens SINEC INS
71 vulnerabilities in third-party components as Node.js, cURL, SQLite, CivetWeb and DNS(ISC BIND) could allow an attacker to interfere with the affected product in various ways. Siemens has released an update for SINEC INS and recommends to update to the late…
first Mar 8, 2022 -
High
Siemens SINUMERIK MC
The NC plug-in card in SINUMERIK MC contains a privilege escalation vulnerability that could allow local attackers to escalate their privileges to root. This allows full access to the device, including read and modifying G code. Siemens has released updates f…
first Mar 8, 2022 -
Medium max 6.8
Siemens Mendix
A XPath Constraint vulnerability in the Mendix Runtime was discovered, that can affect the running applications. The vulnerability could allow a malicious user to deduce contents of inaccessible attributes and modify sensitive data. Siemens has released new v…
first Mar 8, 2022 -
High
Siemens SCALANCE W1700
Vulnerabilities have been identified in devices of the SCALANCE W-1700 (11ac) family that could allow an attacker to cause various denial of service conditions. Siemens has released updates for the affected products and recommends to update to the latest vers…
first Apr 12, 2022