Skip to content
OpenAdvisories

Source

Siemens ProductCERT

Source: https://cert-portal.siemens.com/productcert/

44 results · Clear filters · Feed

  • Critical max 7.8
    SSA-222547 10 CVEs 1 exploited

    SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0

    Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recom…

  • Critical max 10.0
    SSA-714170 2 CVEs 2 exploited rev. 2

    SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000

    On 2021-12-09, a vulnerability in Apache Log4j (a logging library used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and …

    first Dec 16, 2021
  • Critical max 10.0
    SSA-479842 3 CVEs 2 exploited rev. 2

    SSA-479842: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer / Sensgear (Platform, Basic and Advanced)

    On 2021-12-09, a vulnerability in Apache Log4j (a logging tool used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and is …

    first Dec 21, 2021
  • Critical max 10.0
    SSA-397453 2 CVEs 2 exploited

    SSA-397453: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Energy TraceAlertServerPLUS

    On 2021-12-09, a vulnerability in Apache Log4j (a logging library used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and …