4,105 results · Feed
-
Medium max 5.5
Siemens RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
first Nov 12, 2024 -
High max 7.8
Siemens SIPORT
SIPORT before V3.4.0 contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released a new version for S…
first Nov 12, 2024 -
Medium max 6.8
Siemens OZW672 and OZW772 Web Server
OZW672 and OZW772 Web Server versions before V5.2 contain a stored cross-site scripting (XSS) vulnerability that could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with …
first Nov 12, 2024 -
High max 9.8
Siemens SCALANCE M-800 Family
SCALANCE M-800 family before V8.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Nov 12, 2024 -
High max 7.3
Siemens Engineering Platforms
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected pr…
first Nov 12, 2024 -
Critical max 10.0
Siemens TeleControl Server
TeleControl Server Basic V3.1 contains a deserialization vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the device. Siemens has released new versions for the affected products and recommends to update to the latest ver…
first Nov 12, 2024 -
High max 7.5
Siemens SIMATIC CP
SIMATIC CP 1543-1 devices contain an Incorrect Authorization vulnerability that could allow an unauthenticated attacker to gain access to the filesystem. Siemens has released a new version for SIMATIC CP 1543-1 V4.0 and recommends to update to the latest vers…
first Nov 12, 2024 -
High max 7.8
Fuji Electric Monitouch V-SFT (Update A)
Successful exploitation of these vulnerabilities could crash the device being accessed.
first Dec 3, 2024 -
Medium max 4.6
Siemens CPCI85 Central Processing/Communication
The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware. Siemens has released new firmware and hardware versions for the affected products and recommen…
first Dec 10, 2024 -
High max 8.8
Siemens RUGGEDCOM ROX II
The CLI feature in the web interface of RUGGEDCOM ROX II devices is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to perform administrative actions if an authenticated user is tricked into accessing a malicious link. Siemens h…
first Dec 10, 2024 -
High max 7.8
Siemens Parasolid
Parasolid is affected by out of bounds write vulnerability that could be triggered when the application reads files in PAR format. If a user is tricked to open a malicious file with the affected applications, an attacker could perform remote code execution in…
first Dec 10, 2024 -
Medium max 5.5
Siemens COMOS
COMOS is affected by XXE injection vulnerabilities that could allow an attacker to extract arbitrary application files. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specifi…
first Dec 10, 2024 -
High max 7.8
Siemens Teamcenter Visualization
Siemens Teamcenter Visualization contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applic…
first Dec 10, 2024 -
High max 7.4
Siemens Mendix LDAP
The Mendix LDAP module is affected by an LDAP injection vulnerability that could allow an unauthenticated remote attacker to bypass username verification. Siemens has released a new version for Mendix LDAP and recommends to update to the latest version.
first Jan 14, 2025 -
High max 7.8
Siemens Siveillance Video Camera
Several camera device drivers in the Siveillance Video Device Pack store camera credentials in their log file when authentication fails. This could allow a local attacker to read camera credentials stored in the Recording Server under specific conditions. Sie…
first Jan 14, 2025 -
High max 7.1
Siemens SIMATIC S7-1200 CPUs
The web interface of SIMATIC S7-1200 CPUs before V4.7 is affected by a cross-site request forgery (CSRF) vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Jan 14, 2025 -
High max 7.5
Siemens SIMATIC S7-1200 CPU Family
SIMATIC S7-1200 CPU family before V4.7 is affected by two denial of service vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Feb 11, 2025 -
Medium max 5.3
Siemens SIMATIC
The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for several affected products and recommends to update…
first Feb 11, 2025 -
Medium max 6.2
Siemens OpenV2G
The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.
first Feb 11, 2025 -
Critical max 9.8
Siemens SCALANCE W700 IEEE 802.11ax
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Feb 11, 2025 -
Medium max 6.7
Siemens Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest ver…
first Feb 11, 2025 -
High max 8.8
Siemens SIMATIC PCS neo, TIA Administrator, and TIA Portal
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
first Feb 11, 2025 -
Critical max 10.0
Siemens Opcenter Intelligence
The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below. Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version…
first Feb 11, 2025 -
Critical max 9.1
Siemens SiPass Integrated
SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore…
first Feb 17, 2025 -
High max 7.8
Siemens Teamcenter Visualization and Tecnomatix
Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected pro…
first Mar 11, 2025 -
Critical max 9.1
Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected produ…
first Mar 11, 2025 -
High max 8.8
Siemens SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version.
first Mar 11, 2025 -
Medium max 6.8
Siemens Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation do not properly limit the access of the simulation model to the filesystem. This could allow an unauthorized attacker to read or delete arbitrary files or the entire filesystem of the device. Siemens has released new versio…
first Mar 11, 2025 -
High max 7.8
Siemens Simcenter Femap
Siemens Simcenter Femap is affected by memory corruption vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnera…
first Mar 13, 2025 -
Medium max 6.7
Siemens License Server (SLS)
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to …
first Apr 8, 2025 -
High max 9.1
Siemens SIDIS Prime
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the l…
first Apr 8, 2025 -
High max 7.8
Siemens Solid Edge
Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacke…
first Apr 8, 2025 -
Critical max 9.8
Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected product…
first Apr 8, 2025 -
High max 8.5
Rockwell Automation Arena
Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.
first Apr 10, 2025 -
Medium max 6.2
Subnet Solutions PowerSYSTEM Center
Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.
first Apr 10, 2025 -
High max 7.5
INFINITT Healthcare INFINITT PACS
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files and access unauthorized system resources, resulting in arbitrary code execution or information disclosure.
first Apr 10, 2025 -
Critical max 9.8
Growatt Cloud Applications
Successful exploitation of these vulnerabilities could allow an attacker to compromise confidentiality, achieve cross-site scripting, or code execution on affected devices.
first Apr 15, 2025 -
High max 7.8
National Instruments LabVIEW
Successful exploitation of these vulnerabilities lead to the execution of arbitrary code on affected installations of LabVIEW, which could result in invalid memory writes.
first Apr 15, 2025 -
Critical max 9.8
Mitsubishi Electric Europe B.V. smartRTU
Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete information in the product, or cause a denial-of service condition on the product.
first Apr 15, 2025 -
Critical max 9.8
Siemens TeleControl Server Basic SQL
TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService"…
first Apr 16, 2025