217 results · Clear filters · Feed
-
Critical max 9.8
SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2
SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process. Siemens has released a new version for SIMATIC RF160B and recommends to update to the latest …
-
Critical max 9.1
SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family before V4.5 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Nov 14, 2023 -
Critical max 9.8SSA-576771 2 CVEs
SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2
SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Critical max 9.8
SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4
SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities. Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
-
Critical max 9.1SSA-602936 8 CVEs
SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1
SCALANCE SC-600 Family before V3.1 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, o…
-
Critical max 9.8SSA-580228 1 CVE
SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
Location Intelligence before V4.3 is affected by a Use of Hard-coded Credentials vulnerability that could allow an attacker to obtain full administrative access to the application. Siemens has released new versions for the affected products and recommends to …
-
Critical max 9.8SSA-777015 3 CVEs
SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7
SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device. Siem…
-
Critical max 9.9
SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS)
The advisory informs about multiple vulnerabilities in the Central Control Server (CCS) application, as initially reported in SSA-761617 ( https://cert-portal.siemens.com/productcert/html/ssa-761617.html) on 2019-12-10 and SSA-844761 (https://cert-portal.siem…
first Apr 13, 2021 -
Critical max 9.8
SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server
The Video Server application in SiNVR/SiVMS solutions contains two vulnerabilities involving authentication bypass (CVE-2019-18339) and information disclosure (CVE-2019-18340). PKE has released an update of the application that fixes CVE-2019-18339. This upda…
first Dec 10, 2019 -
Critical max 10.0SSA-702935 1 CVE
SSA-702935: Redfish Server Vulnerability in maxView Storage Manager
MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access. Microchip has released new versions for the affected products and recommends to update to the latest versions.
-
Critical max 9.9
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50
SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Nov 8, 2022 -
CriticalSSA-617233 9 CVEs
SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices
SIPROTEC 4 7SJ66 devices are affected by multiple security vulnerabilities due to the underlying Wind River VxWorks network stack. This stack is affected by nine of the eleven vulnerabilities that are also known as "URGENT/11". The vulnerabilities could allow…
-
Critical max 9.8SSA-150063 13 CVEs
SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0
SINEC PNI before V2.0 is affected by multiple vulnerabilities. Siemens has released an update for SINEC PNI and recommends to update to the latest version.
-
Critical max 9.8SSA-137900 16 CVEs
SSA-137900: Multiple Vulnerabilities in COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released an update for COMOS and recommends to updat…
-
Critical max 9.8SSA-099606 8 CVEs
SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5
SIMATIC MV500 before V3.3.5 is affected by multiple vulnerabilities. Siemens has released an update for SIMATIC MV500 and recommends to update to the latest version.
-
Critical max 9.8SSA-843070 13 CVEs
SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated …
-
Critical max 9.8SSA-386812 1 CVE
SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1
Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process. Siemens has released an update for Simcenter Amesi…
-
Critical max 9.8SSA-134651 1 CVE
SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug supp…
-
Critical max 9.1
SSA-851884: Authentication Bypass Vulnerability in Mendix SAML Module
The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to upd…
first Mar 14, 2023 -
Critical max 9.8SSA-472630 5 CVEs
SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the a…
-
Critical max 9.8SSA-561322 13 CVEs
SSA-561322: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3.4
SIMATIC MV500 devices before V3.3.4 are affected by multiple vulnerabilities in the web server and several third-party components. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Critical max 9.9SSA-313488 2 CVEs
SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation. Siemens has released an update for SIMATIC CN 4100 and recommends to update t…
-
Critical max 9.8SSA-146325 21 CVEs
SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16
Devices based on RUGGEDCOM ROX before V2.16 contain multiple high severity vulnerabilities, including the third-party vulnerabilities: CVE-2022-24903, CVE-2022-2068, CVE-2021-22946, CVE-2022-22576, CVE-2022-27781, CVE-2022-27782, CVE-2022-32207, CVE-2022-1292…
-
Critical max 9.8
SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products
SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 ( https://cert-portal.siemens.com/productcert/html/ssa-419740.html). Siemens recommends to update the firmware of the in…
first Jun 13, 2023 -
Critical max 9.9SSA-887249 6 CVEs
SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to …
-
Critical max 9.8
SSA-824231: Unauthenticated Firmware Upload Vulnerability in Desigo PX Controllers
Several Desigo PXC/PXM devices contain a vulnerability that could allow unauthenticated remote attackers to upload malicious firmware without prior authentication. Siemens has released updates for the affected products and recommends to update to the latest v…
first Jan 24, 2018 -
Critical max 9.9
SSA-572005: Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices
Session fixation and multiple incorrect parameter parsing vulnerabilities that could potentially lead to remote code execution were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and r…
first Oct 11, 2022 -
Critical max 9.8SSA-892048 9 CVEs
SSA-892048: Third-Party Component Vulnerabilities in SINEC NMS before V1.0.3.1
Multiple vulnerabilities affecting third-party components libexpat and libcurl of SINEC NMS before V1.0.3.1 could allow an attacker to impact SINEC NMS confidentiality, integrity and availability. Siemens has released an update for SINEC NMS and recommends to…
-
Critical max 9.9SSA-789345 2 CVEs
SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers
Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the aff…
-
Critical max 9.9SSA-325383 4 CVEs
SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
-
Critical max 9.9
SSA-840188: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow local or remote attackers to escalate privileges and read, write or delete critical files. Siemens has released updates for several affected products and recommends to update to …
first Nov 9, 2021 -
Critical max 9.8SSA-558014 10 CVEs
SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2
Multiple vulnerabilities in the third-party components cURL, BusyBox, libtirpc, Expat as well as in the Linux Kernel could allow an attacker to impact the SCALANCE XCM332 device's confidentiality, integrity and availability. Siemens has released an update for…
-
Critical max 9.8SSA-472454 1 CVE
SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by unauthenticated command injection vulnerability. This could allow an attacker to perfom remote code execution. Siemens has released updates for the affected products and recommends to updat…
-
Critical max 9.6
SSA-310038: Multiple Vulnerabilities in SCALANCE X Switch Devices
Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released …
first Jul 12, 2022 -
Critical max 7.5
SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jul 13, 2021 -
Critical max 10.0
SSA-517377: Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices
The below referenced devices contain multiple vulnerabilities that could be exploited when the SINEMA Remote Connect Server (SRCS) VPN feature is used. The feature is not activated by default. The most severe could allow an attacker to execute arbitrary code …
first Jul 12, 2022 -
Critical max 9.8
SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special…
-
Critical max 9.8SSA-953464 4 CVEs
SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15
Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS). Siemens has rel…
-
Critical max 10.0SSA-693110 1 CVE
SSA-693110: Buffer Overflow Vulnerability in COMOS
COMOS is affected by memory corruption vulnerability in the cache validation service that could allow an attacker to execute arbitrary code or cause denial of service condition. Siemens has released updates for the affected products and recommends to update t…
-
Critical max 9.3
SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released…
first Nov 8, 2022