456 results · Clear filters · Feed
-
High max 8.1
SSA-978177: Vulnerability in Nozomi Guardian/CMC Before 25.4.0 on RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to upda…
first Aug 12, 2025 -
High max 8.8
SSA-912274: Multiple Vulnerabilities in RUGGEDCOM ROX Before V2.17
Devices based on RUGGEDCOM ROX before V2.17 contain multiple high severity vulnerabilities. Siemens has released a new version for RUGGEDCOM ROX II family and recommends to update to the latest version.
first Dec 9, 2025 -
High max 6.9
SSA-698820: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens r…
first Jul 9, 2024 -
High max 8.1
SSA-365200: Google Chrome Type Confusion Vulnerability in Siemens Products
Multiple Siemens products are affected by a type confusion vulnerability in Google Chrome prior to 138.0.7204.96. This could allow a remote attacker to perform arbitrary code execution via a crafted HTML page. Siemens has released a new version for Industrial…
first Oct 14, 2025 -
High max 8.8SSA-192617 1 CVE
SSA-192617: Local Privilege Escalation Vulnerability in TeleControl Server Basic Before V3.1.2.4
TeleControl Server Basic before V3.1.2.4 contains a local privilege escalation vulnerability that could allow an attacker to run arbitrary code with elevated privileges. Siemens has released a new version for TeleControl Server Basic and recommends to update …
-
High max 7.8SSA-512988 1 CVE
SSA-512988: File Parsing Vulnerability in Simcenter Femap Before V2512
Siemens Simcenter Femap versions before V2512 are affected by uninitialized memory vulnerability that could be triggered when the application reads files in SLDPRT format. If a user is tricked to open a malicious file with the affected application, an attacke…
-
High max 7.5SSA-915282 1 CVE
SSA-915282: Denial of service Vulnerability in Interniche IP-Stack based Industrial Devices
Multiple Industrial products are affected by a vulnerability in the Interniche IP-Stack. The affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthentic…
-
High max 8.2
SSA-673996: Buffer Overflow Vulnerability in Third-Party Component in SICAM and SITIPE Products
Multiple SICAM products are affected by buffer overflow vulnerability in the IEC 61850 Client libraries from Triangle MicroWorks that could allow an unauthenticated remote attacker to create a denial of service condition by sending specially crafted MMS messa…
first Sep 10, 2024 -
High max 8.3SSA-416652 5 CVEs
SSA-416652: Multiple Vulnerabilities in SIMATIC CN 4100 Before V4.0.1
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
-
High max 7.8SSA-241605 1 CVE
SSA-241605: Out of Bounds Read in PS/IGES Parasolid Translator Component Before V29.0.258
PS/IGES Parasolid Translator Component contains an out of bounds read that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
-
High max 7.5
SSA-711309: Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products
The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. S…
first Sep 12, 2023 -
High max 7.5SSA-522291 1 CVE
SSA-522291: Improper Certificate Validation Vulnerability in Solid Edge
Solid Edge is affected by improper certificate validation while connecting to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released a new version for Solid Edge SE2025 and reco…
-
High max 7.8SSA-514895 2 CVEs
SSA-514895: Multiple Vulnerabilities in Altair Grid Engine V2025.1.0
Altair Grid Engine contain multiple vulnerabilities that could allow an attacker to escalate privileges and execute arbitrary code with superuser permissions. Siemens has released a new version for Altair Grid Engine and recommends to update to the latest ver…
-
High max 7.8SSA-365596 1 CVE
SSA-365596: DLL Hijacking Vulnerability in Siemens Software Center and Solid Edge
Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommend…
-
High max 8.8SSA-339694 5 CVEs
SSA-339694: Multiple Vulnerabilities in Spectrum Power 4 Before v4.70 SP12 Security Patch 2
Spectrum Power 4 before v4.70 SP12 Security Patch 2 contains multiple vulnerabilities that could allow an attacker to remotely execute code as application administrator or locally execute code as operating system administrator. Siemens has released a new vers…
-
High max 7.5
SSA-322980: Denial of Service Vulnerability in SIPROTEC 5 Devices
SIPROTEC 5 devices contain a null pointer dereference vulnerability in the web service. This could allow an attacker to send unauthenticated maliciously crafted http request that could cause denial of service condition of the device. Siemens has released new …
first Apr 11, 2023 -
High max 7.5
SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices
SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causi…
first Jun 10, 2011 -
High max 7.5
SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update …
first May 13, 2025 -
High max 7.8SSA-541582 4 CVEs
SSA-541582: Multiple File Parsing Vulnerabilities in Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted PRT files format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new ve…
-
High max 8.1
SSA-373591: Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices
The latest update for RUGGEDCOM ROS devices fixes a buffer overflow vulnerability in the third party component that could allow an attacker with network access to an affected device to cause a remote code execution condition. Siemens has released updates for …
first Jul 13, 2021 -
High max 8.8SSA-318832 1 CVE
SSA-318832: SQL Injection Vulnerability in SINEC NMS
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update t…
-
High
SSA-240718: Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2
SIMATIC S7-1200 CPU V2 devices contain an insufficiently protected private key used for the Certificate Authority (CA) for HTTPS connections. Possession of this key could allow remote attackers to spoof the device's web server by creating a forged web server …
first Sep 13, 2012 -
High max 8.8
SSA-083019: Multiple Vulnerabilities in RUGGEDCOM ROS Devices
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for…
first Jul 8, 2025 -
High max 7.8
SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and re…
first Apr 11, 2023 -
High max 7.5SSA-640476 1 CVE
SSA-640476: Denial of Service Vulnerability in Industrial Edge Management
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
-
High max 8.8
SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Mar 11, 2025 -
High max 8.7SSA-395458 1 CVE
SSA-395458: Account Hijacking Vulnerability in Mendix SAML Module
Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.
-
High max 6.9SSA-994087 3 CVEs
SSA-994087: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.7
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
-
High max 8.8
SSA-856721: Vulnerability in RUGGEDCOM Discovery Protocol (RCDP) of Industrial Communication Devices
The RUGGEDCOM RCDP protocol is not properly configured after commissioning of RUGGEDCOM ROS based devices and some SCALANCE X switch models and could allow unauthenticated remote users to perform administrative operations. An attacker must be in the same adja…
first Sep 28, 2017 -
High max 8.0
SSA-840800: Code Injection Vulnerability in RUGGEDCOM ROS
RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the Command Line Interface (CLI). Siemens has released new versions for several affected products and recommends …
first Jul 12, 2022 -
High max 7.5
SSA-770902: Denial of Service Vulnerability in the Web Server of RUGGEDCOM ROS Devices
A denial of service vulnerability could allow an unauthorized attacker to cause total loss of availability in the web server of the affected devices. Siemens has released new versions for several affected products and recommends to update to the latest versio…
first Aug 8, 2023 -
High max 8.1SSA-769791 1 CVE
SSA-769791: Local Arbitrary Code Execution Vulnerability in COMOS Before V10.6
COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
High max 7.5
SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for the affected products and recommends to update to the latest v…
first Feb 11, 2025 -
High max 7.8SSA-674084 2 CVEs
SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506
Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or …
-
High max 7.8SSA-517338 7 CVEs
SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures …
-
High max 7.5SSA-400089 1 CVE
SSA-400089: Denial of Service Vulnerability in SIPROTEC 4 and SIPROTEC 4 Compact
SIPROTEC 4 and SIPROTEC 4 Compact devices contain a vulnerability that could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the lates…
-
High max 7.1SSA-382999 7 CVEs
SSA-382999: Multiple Vulnerabilities in Opcenter Quality Before V2506
The Opcenter Quality is affected by multiple vulnerabilities in the SmartClient modules Opcenter QL Home (SC), SOA Audit and SOA Cockpit. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 8.3SSA-177847 1 CVE
SSA-177847: Improper VNC Password Check Vulnerability in SINUMERIK Controllers
Siemens SINUMERIK Controllers are affected by an improper VNC password check vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 8.8
SSA-170375: Multiple Vulnerabilities in RUGGEDCOM ROS Before V5.9
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). The common denominator to all vulnerabilities is the leak of confidential information. Siemens has released new versions for several affected products and recommends to update to the latest…
first Jul 9, 2024 -
High max 7.6SSA-094954 1 CVE
SSA-094954: Authentication Bypass Vulnerability in BIST mode of RUGGEDCOM ROX II
RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test (BIST) mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific cou…