4,105 results · Feed
-
Critical max 9.8
Siemens SINEC NMS Third-Party
Multiple vulnerabilities affecting third-party components libexpat and libcurl of SINEC NMS before V1.0.3.1 could allow an attacker to impact SINEC NMS confidentiality, integrity and availability. Siemens has released an update for SINEC NMS and recommends to…
first May 9, 2023 -
Critical max 9.9
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
first May 9, 2023 -
Critical max 9.9
Siemens SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to …
first Jun 13, 2023 -
Medium max 4.6
Siemens SIMOTION
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to updat…
first Jun 13, 2023 -
High max 7.8
Siemens SIMATIC WinCC V7
SIMATIC WinCC V7 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges, if a non-default installation path was chosen during installation. Siemens has released an update for SIMATIC WinCC and recomme…
first Jun 13, 2023 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could l…
first Jun 13, 2023 -
Critical max 9.8
Siemens RUGGEDCOM ROX
Devices based on RUGGEDCOM ROX before V2.16 contain multiple high severity vulnerabilities, including the third-party vulnerabilities: CVE-2022-24903, CVE-2022-2068, CVE-2021-22946, CVE-2022-22576, CVE-2022-27781, CVE-2022-27782, CVE-2022-32207, CVE-2022-1292…
first Jul 11, 2023 -
High max 7.5
Siemens SiPass Integrated
SiPass integrated versions before V2.90.3.8 contain a stack overflow vulnerability that could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Siemens has released an update for SiPass integrate…
first Jul 11, 2023 -
Critical max 9.9
Siemens SIMATIC CN 4100
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation. Siemens has released an update for SIMATIC CN 4100 and recommends to update t…
first Jul 11, 2023 -
Critical max 9.8
Siemens SIMATIC MV500 Devices
SIMATIC MV500 devices before V3.3.4 are affected by multiple vulnerabilities in the web server and several third-party components. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jul 11, 2023 -
High max 7.8
Siemens Solid Edge, JT2Go, and Teamcenter Visualization
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application…
first Aug 8, 2023 -
High max 7.8
​Siemens JT Open, JT Utilities, and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application …
first Aug 8, 2023 -
High max 7.8
​Siemens Software Center
Multiple DLL Hijacking vulnerabilities in Siemens Software Center (SSC) could allow a local attacker to execute code with elevated privileges. Siemens has released an update for the Siemens Software Center and recommends to update to the latest version.
first Aug 8, 2023 -
Critical max 9.8
Siemens RUGGEDCOM CROSSBOW
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the a…
first Aug 8, 2023 -
High max 7.4
Siemens SIMATIC
Several SIMATIC products are affected by a type confusion vulnerability relating to OpenSSL X.400 address processing (CVE-2023-0286), as disclosed disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt. Siemens has released new versions f…
first Aug 8, 2023 -
Medium max 5.9
Siemens SIMATIC
Several SIMATIC products are affected by a timing based side channel vulnerability in the OpenSSL RSA Decryption (CVE-2023-4304), as disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt. Siemens has released new versions for several aff…
first Aug 8, 2023 -
High max 7.8
Siemens SICAM TOOLBOX II
SICAM TOOLBOX II contains two vulnerabilities that could allow local attackers to execute code on the system with elevated privileges. Siemens has released an update for SICAM TOOLBOX II and recommends to update to the latest version.
first Aug 8, 2023 -
High max 7.8
Siemens Parasolid
Parasolid is affected by out of bounds write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to …
first Sep 12, 2023 -
High max 8.8
Siemans QMS Automotive
QMS Automotive before V12.39 contains multiple vulnerabilities that could allow an attacker to perform malicious code injection, information disclosure or lead to a denial of service condition. Siemens has released an update for QMS Automotive and recommends …
first Sep 12, 2023 -
Medium max 6.5
Siemens SIMATIC IPCs
Several Intel-CPU based SIMATIC IPCs are affected by an information exposure vulnerability (CVE-2022-40982) in the CPU that could allow an authenticated local user to potentially read other users' data [1]. The issue is also known as "Gather Data Sampling" (G…
first Sep 12, 2023 -
High max 8.2
Siemens Spectrum Power 7
Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code to the update script and escalate privileges. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest …
first Sep 14, 2023 -
Critical max 9.8
Delta Electronics InfraSuite Device Master
Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and obtain plaintext credentials.
first Nov 28, 2023 -
High max 7.6
Siemens LOGO! and SIPLUS LOGO!
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a vulnerability that could allow an electromagnetic fault injection. This could allow an attacker to dump and debug the firmware, including the manipulation of memory. Further actions could allow to inject…
first Dec 12, 2023 -
High max 7.5
Siemens SINUMERIK
A vulnerability has been identified in the integrated S7-1500 CPU of SINUMERIK ONE and SINUMERIK MC products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affect…
first Dec 12, 2023 -
High max 7.8
Siemens SINEC Traffic Analyzer
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
first Jun 11, 2024 -
Medium max 5.3
Siemens SIMATIC and SIMIT
Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in several industrial products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to hi…
first Jul 9, 2024 -
High max 8.8
Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
SINUMERIK ONE, SINUMERIK 840D sl and SINUMERIK 828D are affected by a privilege escalation vulnerability that could allow an authenticated local attacker to escalate their privileges in the underlying system. Siemens has released new versions for several affe…
first Sep 10, 2024 -
Medium max 6.5
Siemens SIMATIC RFID Readers
SIMATIC RFID Readers contain multiple vulnerabilities that could allow an attacker to cause Denial-of-Service, exploit hidden functionality and information exposure. Siemens has released new versions for the affected products and recommends to update to the l…
first Sep 10, 2024 -
High max 7.3
Siemens Industrial Products
A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process allowing a remote attacker to c…
first Sep 10, 2024 -
Medium max 5.9
Siemens SIMATIC, SIPLUS, and TIM
Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack. Siemens has released new versions for several affected products and recommends to u…
first Sep 10, 2024 -
High max 7.8
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in SPP file format. If a user is tricked to open a malicious file with any of the affected products, this c…
first Sep 10, 2024 -
Critical max 9.1
Siemens SCALANCE W700
Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Sep 10, 2024 -
High max 7.8
Siemens Simcenter Nastran
Simcenter Nastran contains multiple memory corruption vulnerabilities that could be triggered when the application reads files in BDF file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
first Oct 8, 2024 -
High max 7.8
Siemens Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, …
first Oct 8, 2024 -
Medium max 6.7
Siemens Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the l…
first Oct 8, 2024 -
High max 7.8
Siemens JT2Go
Siemens JT2Go is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in PDF format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application t…
first Oct 8, 2024 -
High max 8.5
Siemens HiMed Cockpit
HiMed Cockpit devices before V11.6.2 contain a Kiosk Mode Escape vulnerability that could allow an attacker to escape the restricted environment and gain access to the underlying operating system. Siemens has released a new version for the HiMed Cockpit devic…
first Oct 8, 2024 -
High max 7.8
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the app…
first Oct 8, 2024 -
Medium max 6.7
Siemens Siveillance Video Camera
Several camera device drivers in the Siveillance Video Device Pack contain a buffer overflow vulnerability that could be exploited under strict conditions. This could allow an attacker to execute code with the permissions of the Recording Server user. Siemens…
first Oct 10, 2024 -
Critical max 10.0
Siemens InterMesh Subscriber Devices
InterMesh Subscriber devices contain multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges. Siemens has released new versions for the affected products and recommends to update to the lates…
first Oct 23, 2024