456 results · Clear filters · Feed
-
High max 8.1
SSA-183963: Certificate Validation Vulnerabilities in SICAM TOOLBOX II Before V07.11
During establishment of a https connection to the TLS server of a managed device, SICAM TOOLBOX II improperly validates that device's certificate. This could allow an attacker to execute an on-path network (MitM) attack. Siemens has released a new version for…
first Jul 8, 2025 -
High max 7.5
SSA-593272: SegmentSmack in Interniche IP-Stack based Industrial Devices
A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which c…
first Apr 14, 2020 -
High max 7.8SSA-573669 2 CVEs
SSA-573669: Multiple Vulnerabilities in TIA Administrator Before V3.0.6
Siemens TIA Administrator before V3.0.6 contains multiple vulnerabilities which could allow an attacker to escalate privilege or exceute arbitrary code during installations. Siemens has released a new version for TIA Administrator and recommends to update to …
-
High max 8.1
SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products
An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high imp…
first Sep 10, 2024 -
High max 7.8SSA-091753 3 CVEs
SSA-091753: Multiple Vulnerabilities in Solid Edge Before SE2025 Update 5
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary…
-
High max 7.4
SSA-656895: Open Redirect Vulnerability in Teamcenter
The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. Siemens has released new versions for the affected products and rec…
first Feb 11, 2025 -
High max 7.8SSA-486186 1 CVE
SSA-486186: Out of Bounds Read Vulnerability in Tecnomatix Plant Simulation Before 2404
Siemens Tecnomatix Plant Simulation contains a out-of-bound read vulnerability that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applica…
-
High max 7.5
SSA-340240: Denial of Service Vulnerability in SIRIUS 3RV2921-5M
A vulnerability in SIRIUS 3RV2921-5M could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIRIUS 3RV2921-5M and recommends to update to the latest version.
first Oct 8, 2024 -
High max 7.1
SSA-162506: DHCP Client Vulnerability in SIMOTICS CONNECT 400, Desigo PXC/PXM, APOGEE MEC/MBC/PXC, APOGEE PXC Series, and TALON TC Series
SIMOTICS CONNECT 400, Desigo (Power PC-based), APOGEE MEC/MBC/PXC and TALON TC products are affected by a DHCP Client vulnerability as initially reported in SSA-434032 for the Mentor Nucleus Networking Module. Siemens has released updates for several affected…
first Apr 14, 2020 -
High max 7.5SSA-041082 1 CVE
SSA-041082: Out of Bounds Read Vulnerability in SiPass Integrated Before V2.95.3.18
SiPass integrated versions before V2.95.3.18 contain an out of bounds read vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition. Siemens has released a new version for SiPass integrated and recommends to up…
-
High max 8.8
SSA-556937: Multiple Vulnerabilities in VersiCharge AC Series EV Chargers
VersiCharge AC Series EV Chargers contain two vulnerabilities that could allow an attacker to gain control of the chargers through default Modbus port or execute arbitrary code by manipulating the M0 firmware. Siemens recommends countermeasures for products w…
first May 13, 2025 -
High max 7.5
SSA-935500: Denial of Service Vulnerability in FTP Server of Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products
A denial of service vulnerability has been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-313313: https://cert-portal.siemens.com/productcert/html/ssa-313313.html. The products listed below use af…
first Oct 11, 2022 -
High max 8.7SSA-901508 8 CVEs
SSA-901508: Multiple Vulnerabilities in INTRALOG WMS Before V5
INTRALOG WMS before V5 is affected by multiple vulnerabilities in the Microsoft .NET implementation as described below. Siemens has released a new version for INTRALOG WMS and recommends to update to the latest version. Please approach your INTRALOG WMS conta…
-
High max 7.8SSA-542540 1 CVE
SSA-542540: Out of Bounds Read Vulnerability in Teamcenter Visualization
Siemens Teamcenter Visualization contains a out-of-bound read vulnerability that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
-
High max 7.5SSA-523418 1 CVE
SSA-523418: Information Disclosure Vulnerability in Desigo CC
Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected …
-
High max 8.8SSA-339086 1 CVE
SSA-339086: Insufficient Session Expiration Vulnerability in SIMATIC PCS neo
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
-
High max 7.5SSA-222768 3 CVEs
SSA-222768: Multiple Vulnerabilities in SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems only provide weak password obfuscation. An attacker with access to the PROFINET or serial interface of the device could eavesdrop or read the stored password from the device and de-obfuscate it. The sa…
-
High max 8.6
SSA-103653: Denial-of-Service Vulnerability in Automation License Manager
A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the syst…
first Sep 10, 2024 -
High max 7.8SSA-672923 1 CVE
SSA-672923: Out of Bounds Write Vulnerability in Solid Edge
Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacke…
-
High max 7.0
SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products …
first Feb 11, 2025 -
High max 9.1SSA-277137 14 CVEs
SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the l…
-
High max 7.8SSA-920092 1 CVE
SSA-920092: Memory Corruption Vulnerability in Simcenter Femap
Siemens Simcenter Femap is affected by memory corruption vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnera…
-
High max 8.2
SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic
Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embed…
first Dec 14, 2021 -
High max 7.1
SSA-434032: Input Validation Vulnerability in the DHCP Client of Nucleus RTOS
The DHCP implementation of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability that could allow an attacker to change the IP address of an affected device to an invalid value. Siemens has released new v…
first Nov 12, 2019 -
High max 7.5
SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new vers…
first Apr 13, 2021 -
High max 8.8SSA-075201 7 CVEs
SSA-075201: Multiple Vulnerabilities in SCALANCE LPE9403 Before V4.0
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version.
-
High max 7.8SSA-050438 8 CVEs
SSA-050438: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and Tecnomatix Plant Simulation
Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected pro…
-
High max 8.6
SSA-697140: Denial of Service Vulnerability in the TCP Event Service of SCALANCE and RUGGEDCOM Products
The products listed below contain a denial of service vulnerability in the TCP event interface that could allow an unauthenticated remote attacker to render the device unusable. Siemens has released updates for the affected products and recommends to update t…
first Oct 11, 2022 -
High max 7.5SSA-615116 2 CVEs
SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the de…
-
High max 7.5
SSA-349422: Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices
A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released new versions for several affected products and recomme…
first Oct 8, 2019 -
High max 8.8SSA-342348 1 CVE
SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
-
High max 7.5SSA-224824 2 CVEs
SSA-224824: Denial of Service Vulnerabilities in SIMATIC S7-1200 CPU Family Before V4.7
SIMATIC S7-1200 CPU family before V4.7 is affected by two denial of service vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.8
SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
first Jun 11, 2024 -
High max 7.8
SSA-404759: Information Disclosure Vulnerability in Siveillance Video Camera Drivers
Several camera device drivers in the Siveillance Video Device Pack store camera credentials in their log file when authentication fails. This could allow a local attacker to read camera credentials stored in the Recording Server under specific conditions. Sie…
first Jan 14, 2025 -
High max 7.5
SSA-999588: Multiple Vulnerabilities in User Management Component (UMC) Before V2.11.2
Siemens User Management Component (UMC) before V2.11.2 is affected by multiple vulnerabilities where the most severe could lead to a restart of the UMC server. Siemens has released new versions for several affected products and recommends to update to the lat…
first Dec 12, 2023 -
High max 7.3
SSA-871035: Session-Memory Deserialization Vulnerability in Siemens Engineering Platforms Before V19
Affected products do not properly sanitize user-controllable input when parsing files. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new versions for several affected pr…
first Nov 12, 2024 -
High max 7.3
SSA-773256: Impact of Socket.IO CVE-2024-38355 on Siemens Industrial Products
A Socket.IO vulnerability affects multiple Siemens industrial products. This vulnerability consists of a specially crafted Socket.IO packet that triggers an uncaught exception on the Socket.IO server killing the Node.js process allowing a remote attacker to c…
first Sep 10, 2024 -
High max 7.1SSA-717113 1 CVE
SSA-717113: Cross-Site Request Forgery (CSRF) Vulnerability in SIMATIC S7-1200 CPUs before V4.7
The web interface of SIMATIC S7-1200 CPUs before V4.7 is affected by a cross-site request forgery (CSRF) vulnerability. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.2
SSA-690517: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11ax Family
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released a new version for SCALANCE W-700 IEEE 802.11ax family and recommends to update to the latest version. Siemens recommends countermeasures for vulnerabili…
first Jun 11, 2024 -
High max 7.6
SSA-413565: Multiple Vulnerabilities in SCALANCE Products
Multiple SCALANCE devices are affected by several vulnerabilities that could allow an attacker to inject code, retrieve data as debug information as well as user CLI passwords or set the CLI to an irresponsive state. Siemens has released updates for the affec…
first Dec 13, 2022