217 results · Clear filters · Feed
-
Critical max 8.8SSA-390195 19 CVEs
SSA-390195: LibVNC Vulnerabilities in SIMATIC ITC Products
Multiple LibVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to up…
-
Critical max 8.2
SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS
The TCP/IP stack and related services (FTP, TFTP) of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities, also known as "NUCLEUS:13" and as documented below. Siemens has released updates for seve…
first Nov 9, 2021 -
Critical
SSA-847986: Denial-of-Service Vulnerabilities in SIPROTEC 5 relays
The latest update for SIPROTEC 5 relays fixes two vulnerabilities that could allow a remote attacker to cause a denial-of-service or potentially trigger a remote code execution under certain circumstances. Siemens has released an update for SIPROTEC 5 relays …
first Sep 14, 2021 -
Critical
SSA-723417: Multiple Vulnerabilities in SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or trigger buffer overflows. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 11, 2021 -
Critical max 9.8
SSA-538778: SmartVNC Vulnerabilities in SIMATIC HMI/WinCC Products
Multiple SmartVNC vulnerabilities in the affected products listed below could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest ver…
first May 11, 2021 -
Critical max 9.8SSA-944498 1 CVE
SSA-944498: Buffer Overflow Vulnerability in Web Server of APOGEE and TALON Automation Devices
A buffer overflow vulnerability in the integrated web server of multiple APOGEE and TALON automation devices could allow a remote attacker to execute arbitrary code on the devices with root privileges. Affected devices include the APOGEE MBC/MEC/PXC P2 Ethern…
-
CriticalSSA-692317 1 CVE
SSA-692317: Authorization Bypass Vulnerability in Industrial Edge
The latest update for Industrial Edge fixes a vulnerability that could allow an unauthenticated attacker to change the password of any user in the system. With this an attacker could impersonate any valid user on an affected system. Siemens has released updat…
-
CriticalSSA-535380 1 CVE
SSA-535380: Command Injection Vulnerability in Siveillance OIS Affecting Several Building Management Systems
The Siveillance Open Interface Services (OIS) application used for integration of different subsystems to several Siemens building management systems contains a command injection vulnerability that could allow a remote unauthenticated attacker to execute code…
-
CriticalSSA-453715 1 CVE
SSA-453715: Deserialization Vulnerability in CCOM Communication Component of Desigo CC Family
Desigo CC, Desigo CC Compact and Cerberus DMS that use CCOM communication component hosted in IIS contain a deserialisation vulnerability that could allow an unauthenticated attacker to perform remote code execution. Only those systems that use Windows App an…
-
Critical
SSA-187092: Several Buffer-Overflow Vulnerabilities in Web Server of SCALANCE X-200
Several SCALANCE X-200 switches contain buffer overflow vulnerabilities in the web server. In the most severe case an attacker could potentially remotely execute code. Siemens is preparing updates and recommends specific countermeasures for products where upd…
first Apr 13, 2021 -
Critical
SSA-139628: Vulnerabilities in Web Server for Scalance X Products
Several SCALANCE X switches contain vulnerabilities in the web server of the affected devices. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulne…
first Jan 12, 2021 -
CriticalSSA-553445 1 CVE
SSA-553445: DNS "Name:Wreck" Vulnerabilities in Multiple Siemens Energy AGT and SGT solutions
One of the DNS-related vulnerabilities that were reported as "Name:Wreck" may affect the following Siemens Energy products: - Industrial Gas Turbines SGT-100, SGT-200, SGT-300 and SGT-400 with Allen Bradley control systems - Aeroderivative Gas Turbines SGT-A2…
-
Critical max 9.8
SSA-286838: Multiple Vulnerabilities in SINAMICS Medium Voltage Products
SINAMICS medium voltage products, with Sm@rtServer enabled on SIMATIC comfort HMI Panels, are affected by multiple vulnerabilities that could allow an attacker, under certain conditions, to gain full remote access to the HMI. Note that by default Sm@rtServer …
first May 11, 2021 -
CriticalSSA-940818 10 CVEs
SSA-940818: UltraVNC Vulnerabilities in SIMATIC HMIs/WinCC Products
UltraVNC vulnerabilities in the affected products listed below could allow remote code execution, information disclosure and Denial-of-Service attacks under certain conditions. Siemens has released updates for the affected products and recommends to update to…
-
Critical
SSA-478893: TightVNC Vulnerabilities in Industrial Products (Revoked)
Multiple TightVNC (V1.x) vulnerabilities could allow remote code execution and Denial-of-Service attacks under certain conditions. Siemens has previously released this advisory containing a set of products that were considered to be affected. Through Siemens'…
first Dec 8, 2020 -
CriticalSSA-853866 1 CVE
SSA-853866: User Credentials Disclosure Vulnerability in Siveillance Video Open Network Bridge (ONVIF)
Siemens has released hotfixes for Siveillance Video Open Network Bridge (ONVIF) which fix a security vulnerability related to unsecure storage of ONVIF user credentials. The vulnerability could allow an authenticated remote attacker to retrieve and decrypt al…
-
CriticalSSA-788287 1 CVE
SSA-788287: Disclosure of Private Data
Due to SmartClient Installation technology (ClickOnce) a customer/integrator needs to create a customer specific Smartclient installer. The mentioned products delivered a trusted but yet expired codesigning certificate. An attacker could have exploited the vu…