4,108 results · Feed
-
CriticalICSA-22-223-06 1 CVE
Siemens SICAM TOOLBOX II
Successful exploitation of this vulnerability results in full access to the database.
-
High max 7.5
Siemens SIMATIC Panels and WinCC (TIA Portal)
A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to upd…
first Apr 9, 2019 -
Medium
Siemens UMC Stack (Update H)
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execut…
first Jul 14, 2020 -
Medium max 7.5
Siemens SIMATIC S7-300 CPUs and SINUMERIK Controller (Update A)
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet avai…
first Nov 10, 2020 -
High
Siemens SIMATIC Software Products (Update B)
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has…
first Jul 13, 2021 -
Medium
Siemens SIMATIC WinCC and PCS
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest …
first Feb 8, 2022 -
Critical
Siemens SICAM TOOLBOX II (Update A)
SICAM TOOLBOX II contains a vulnerability that could allow an attacker access through a circumventable access control. Siemens recommends countermeasures for products where updates are not, or not yet available.
first Feb 8, 2022 -
High max 3.7
Siemens Industrial Devices using libcurl
Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends count…
first May 10, 2022 -
High
Siemens Teamcenter
Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recom…
first May 10, 2022 -
Critical
Siemens Teamcenter
Siemens has released updates for Teamcenter that fixes a security vulnerability related to unsecure storage of user credentials. This vulnerability affects Java EE Server Manager HTML Adaptor. This service is not installed by default and currently also obsole…
first Jun 14, 2022 -
High max 7.8
Siemens Datalogics File Parsing Vulnerability
Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds write vulnerability in APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potenti…
first Jul 12, 2022 -
Critical
Siemens SIMATIC eaSie Core Package
SIMATIC eaSie contains multiple vulnerabilities that could allow an attacker to send arbitrary messages to the underlying message passing framework of the affected system or crash the attached application. Siemens has released an update for the SIMATIC eaSie …
first Jul 12, 2022 -
CriticalICSA-22-221-02 1 CVE
Emerson ControlWave
Successful exploitation of this vulnerability could cause file manipulation, remote code execution, or denial-of-service.
-
CriticalICSA-22-221-03 2 CVEs
Emerson OpenBSI
Successful exploitation of these vulnerabilities could cause remote code execution, change controller configuration, or cause a denial-of-service condition.
-
Medium max 5.3ICSA-22-223-01 1 CVE
Siemens Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains an information disclosure vulnerability when using the Power-on-Demand public license server. An attacker could access a system's host, user, and display name. Siemens is preparing updates and recommends specific countermeasures f…
-
High max 6.8ICSA-22-223-02 2 CVEs
Siemens Teamcenter
Teamcenter is affected by two security vulnerabilities in the File Service Cache service that could lead to command injection and denial of service issues. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium max 5.3ICSA-22-223-05 1 CVE
Siemens SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0…
-
High max 7.6
Inductive Automation Ignition
Successful exploitation of this vulnerability could allow an attacker to obtain file contents.
first Jul 26, 2022 -
Critical max 10.0ICSA-22-216-01 1 CVE
Digi ConnectPort X2D
Successful exploitation of this vulnerability could allow an attacker to execute malicious actions resulting in code execution.
-
Medium max 8.8
Rockwell Products Impacted by Chromium Type Confusion
Successful exploitation of this vulnerability could cause a denial-of-service condition.
-
HighICSA-22-207-02 4 CVEs
Honeywell Safety Manager
Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution.
-
HighICSA-22-207-03 2 CVEs
Honeywell Saia Burgess PG5 PCD
Successful exploitation of these vulnerabilities could allow for configuration manipulation.
-
High max 8.2ICSA-22-207-04 2 CVEs
MOXA NPort 5110
Successful exploitation of these vulnerabilities could allow an attacker to change memory values and/or cause the device to become unresponsive.
-
High max 7.8ICSA-22-202-01 5 CVEs
ABB Drive Composer, Automation Builder, Mint Workbench
Successful exploitation of this vulnerability could allow remote code execution.
-
Medium max 5.3ICSA-22-202-02 1 CVE
Johnson Controls Metasys ADS, ADX, OAS
Successful exploitation of this vulnerability could allow an unauthenticated user to access Metasys web API and enumerate users.
-
High max 8.6ICSA-22-202-03 3 CVEs
Rockwell Automation ISaGRAF Workbench
Successful exploitation of these vulnerabilities could result in directory traversal, privilege escalation, and arbitrary code execution.
-
Critical max 9.6ICSA-22-202-05 1 CVE
AutomationDirect Stride Field I/O
Successful exploitation of this vulnerability could allow an attacker to obtain user credentials.
-
High
Dahua ASI7213X-T1 (Update A)
Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.
first Jul 12, 2022 -
Medium
Siemens SCALANCE X (Update D)
A vulnerability was identified in several SCALANCE X switches that could allow an attacker to feed information into a network via the mirror port with the monitor barrier feature enabled. Siemens has released updates for the affected products and recommends t…
first Mar 12, 2019 -
Medium
Siemens Mendix
An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Apr 12, 2022 -
High
Siemens TIA Administrator
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affec…
first Apr 12, 2022 -
HighICSA-22-195-03 2 CVEs
Siemens SIMATIC MV500 Devices
SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has…
-
HighICSA-22-195-04 1 CVE
Siemens Simcenter Femap
Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected application, an attack…
-
HighICSA-22-195-05 1 CVE
Siemens RUGGEDCOM ROX
RUGGEDCOM ROX devices are affected by a command injection vulnerability that could allow an attacker with administrative privileges to gain root access. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
MediumICSA-22-195-06 1 CVE
Siemens Mendix Excel Importer
The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability. Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.
-
HighICSA-22-195-08 20 CVEs
Siemens PADS Standard/Plus Viewer
Siemens PADS Standard/Plus Viewer is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads files in PCB format. If a user is tricked to open a malicious file with the affected application, an attacker could …
-
MediumICSA-22-195-10 1 CVE
Siemens Mendix Applications
An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix…
-
MediumICSA-22-195-13 1 CVE
Siemens Mendix
An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has r…
-
HighICSA-22-195-14 1 CVE
Siemens CPC80 Firmware of SICAM A8000
A vulnerability was identified in the CPC80 firmware of SICAM A8000 devices. It could allow an unauthenticated remote attacker to cause a permanent denial of service condition. Siemens has released updates for the affected products and recommends to update to…
-
HighICSA-22-195-16 1 CVE
Siemens EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…