865 results · Feed
-
Critical max 9.2
SSA-443410: Node2Shell Vulnerability in Industrial Edge Management Applications
Siemens is currently assessing the impact of Node2Shell (CVE-2026-111497) on Industrial Edge. Please check your Industrial Edge Management (IEM) setup: - No Management Applications installed: No action is required. Although the affected Brotli library is incl…
first Oct 30, 2026 -
Critical max 9.2
SSA-045512: Node2Shell Vulnerability in Siemens Products
On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write t…
first Oct 30, 2026 -
Critical max 9.2
SSA-166980: PHP2Shell Vulnerabilities in Siemens Products
On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory c…
first Oct 26, 2026 -
Critical max 10.0
SSA-834709: Missing Authentication Vulnerability in Node-RED on SIMATIC IoT2050 with Industrial OS
SIMATIC IoT2050 devices running Industrial OS with Node-RED installed contain a missing authentication vulnerability in the Node-RED HTTP interface that could allow an unauthenticated remote attacker to create malicious flows and execute arbitrary code on the…
first Aug 11, 2026 -
Critical max 9.2
SSA-566512: PHP2Shell Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS related to PHP2Shell vulnerabilities. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Customers are advised to consult and implement t…
first Oct 23, 2026 -
Unscored max 9.2
SSA-566435: PHP2Shell Vulnerabilities in Siemens Software Products
On October 21, 2026, the PHP project and security researchers disclosed two critical, unauthenticated remote code execution vulnerabilities in the core PHP language runtime known as "php2shell" (tracked as CVE-2026-109618 and CVE-2026-109619). This advisory c…
first Oct 23, 2026 -
Critical max 9.2
SSA-898633: Node2Shell Vulnerability in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on a vulnerability in PAN-OS related to the Node2Shell vulnerability. This advisory lists the related Siemens Industrial products affected by this vulnerability. Customers are advised to consult and implement t…
-
High max 8.7
SSA-887643: Account Hijacking Vulnerability in Mendix SAML module
Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.
first Sep 3, 2026 -
Medium max 6.8SSA-137528 1 CVE
SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module
Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for…
-
Medium max 6.7
SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution …
first Oct 15, 2026 -
High max 8.3SSA-968435 2 CVEs
SSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher
The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the network to impersonate the manageme…
-
Critical max 8.7
SSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to …
first May 12, 2026 -
High max 7.5SSA-911336 5 CVEs
SSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens recommends to contact customer support to receive patch and update info…
-
Critical max 9.1
SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first May 13, 2025 -
Critical max 8.6
SSA-858251: Authentication Bypass Vulnerabilities in OPC UA
The products listed below contain two authentication bypass vulnerabilities that could allow an attacker to gain access to the data managed by the server. Siemens has released new versions for several affected products and recommends to update to the latest v…
first Mar 11, 2025 -
Critical max 9.1SSA-832641 2 CVEs
SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to …
-
High max 7.8
SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected pr…
first Dec 10, 2024 -
Critical max 9.8
SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC…
first Jun 13, 2023 -
Critical max 9.0
SSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related Products
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SIPROTEC, SICAM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the RAD…
first May 13, 2025 -
Critical max 10.0
SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1. Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.
-
Critical max 9.8SSA-765416 5 CVEs
SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a …
-
High max 8.2
SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms
Affected products do not properly restrict access permissions to a local Windows Named Pipe and do not properly sanitize user-controllable input sent to that Named Pipe. This could allow a local authenticated attacker to cause a type confusion and execute arb…
first Aug 12, 2025 -
Medium max 6.6
SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and …
first Apr 14, 2026 -
Critical max 9.6SSA-591731 8 CVEs
SSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web Server
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is prep…
-
High max 8.1
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup compone…
first Sep 9, 2025 -
High max 8.8SSA-550198 1 CVE
SSA-550198: Authenticated Remote Code Execution in WinCC
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several a…
-
High max 8.3
SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected p…
first May 12, 2026 -
High max 8.8SSA-508506 11 CVEs
SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as mod…
-
High max 7.8
SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms
Affected products do not properly sanitize user-controllable input when parsing project files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several aff…
first Aug 12, 2025 -
Critical max 10.0
SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fixes and recommends specific mitigations for produ…
-
High max 8.8
SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens Products
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends t…
first Jun 9, 2026 -
Critical max 9.8
SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally ide…
first Dec 12, 2023 -
High max 7.3
SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update…
first Dec 10, 2024 -
High max 7.5SSA-390352 2 CVEs
SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API
.NET Client Library for SIMATIC S7 Webserver API contains multiple vulnerabilities that could allow an attacker to obtain sensitive information or write arbitrary files outside the intended download directory. Siemens has released a new version for .NET Clien…
-
Critical max 9.1SSA-377139 2 CVEs
SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that cou…
-
High max 8.2SSA-333035 5 CVEs
SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products
The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends…
-
High max 7.8
SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery
The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulne…
first Aug 12, 2025 -
High max 7.6
SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens has released new versions for the affect…
first Nov 11, 2025 -
Critical max 10.0
SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens…
first Apr 9, 2024 -
High max 7.7SSA-159454 1 CVE
SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs
The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new version…