456 results · Clear filters · Feed
-
HighSSA-133038 2 CVEs
SSA-133038: Multiple Modfem File Parsing Vulnerabilities in Simcenter Femap
Siemens Simcenter Femap is affected by two vulnerabilities that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitr…
-
HighSSA-119468 5 CVEs
SSA-119468: Luxion KeyShot Vulnerabilities in Solid Edge
The Solid Edge installation package includes a specific version of the third-party product KeyShot from Luxion, which may not contain the latest security fixes provided by Luxion. Siemens recommends to update KeyShot according to the information in the Luxion…
-
HighSSA-695540 5 CVEs
SSA-695540: ASM and PAR File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.2
Siemens has released version V13.1.0.2 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read files in ASM and PAR file formats. If a user is tricked to opening of a malicious file with the affect…
-
High
SSA-663999: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0.1
Siemens has released version V13.1.0.1 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read files in different file formats (BMP, TIFF, CGM, TGA, PCT, HPG, PLT, RAS, PAR, ASM, DXF, DWG). If a us…
first Feb 9, 2021 -
High
SSA-622830: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization before V13.1.0
Siemens has released version V13.1.0 for JT2Go and Teamcenter Visualization to fix multiple vulnerabilities that could be triggered when the products read files in different file formats (JT, XML, CG4, CGM, PDF, RGB, SGI, TGA, PAR, PCX). If a user is tricked …
first Jan 12, 2021 -
HighSSA-983548 3 CVEs
SSA-983548: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation has released an update for version V16.0 that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this c…
-
HighSSA-676775 1 CVE
SSA-676775: Denial-of-Service Vulnerability in SIMATIC NET CP 343-1 Devices
A vulnerability in SIMATIC CP343-1 devices could allow an attacker to cause a Denial-of-Service condition on TCP port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are …
-
HighSSA-116379 1 CVE
SSA-116379: Denial-of-Service Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to create a permanent denial-of-service condition. Siemens has released updates for the affected products and re…
-
HighSSA-875726 1 CVE
SSA-875726: Privilege Escalation Vulnerability in Mendix
The latest updates for Mendix fix a vulnerability in Mendix Applications that could allow malicious authorized users to escalate their privileges. Mendix has released an update for Mendix and recommends to update to the latest version.
-
High max 6.5
SSA-979775: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the …
first Mar 9, 2021 -
High
SSA-715184: Multiple File Parsing Vulnerabilities in Solid Edge
Siemens has released new versions for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT, XML extensions). If a user is tricked to open a malicious file with the affected app…
first Mar 9, 2021 -
High
SSA-689942: Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products
Multiple SIMATIC Software products are affected by two vulnerabilities that could allow an attacker to manipulate project files that may lead to Remote Code Execution or Denial-of-Service attacks. Siemens has released updates to some of the affected products …
first Jun 9, 2020 -
High
SSA-591405: Web Vulnerabilities in SCALANCE S-600 Family
The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affecte…
first Feb 11, 2020 -
High
SSA-296266: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released updates for the affect…
first Mar 9, 2021 -
High max 7.5SSA-292794 2 CVEs
SSA-292794: Multiple Denial-of-Service Vulnerabilities in SINEMA Remote Connect Server
The latest update for SINEMA Remote Connect Server fixes two Denial-of-Service vulnerabilities in the underlying third-party XML parser. Siemens has released updates for the affected product and recommends to update to the latest versions.
-
HighSSA-163226 1 CVE
SSA-163226: CELL File Parsing Vulnerability in Tecnomatix RobotExpert
Siemens Tecnomatix RobotExpert version V16.1 fixes a vulnerability that could be triggered when the application reads CELL files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to …