456 results · Clear filters · Feed
-
High max 7.2
SSA-068047: Multiple Vulnerabilities in SCALANCE M-800 Family Before V7.2.2
SCALANCE M-800 family before V7.2.2 is affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Dec 12, 2023 -
High max 8.2
SSA-857368: Multiple Vulnerabilities in Omnivise T3000
Omnivise T3000 contains multiple vulnerabilities that could allow an attacker to escalate privileges. Siemens Energy has released patches for several affected products and recommends to apply the patches. Siemens Energy is preparing further fixes for versions…
first Aug 2, 2024 -
High max 7.5SSA-998949 1 CVE
SSA-998949: Hard-coded Default Encryption Key in Mendix Encryption Module V10.0.0 and V10.0.1
The Mendix Encryption module versions V10.0.0 and V10.0.1 define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encr…
-
High max 8.8SSA-928781 2 CVEs
SSA-928781: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2 HF1
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
High max 7.8SSA-868282 3 CVEs
SSA-868282: Multiple Vulnerabilities in SINEMA Remote Connect Client before V3.2 HF1
SINEMA Remote Connect Server before V3.2 HF1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
High max 7.8SSA-825651 1 CVE
SSA-825651: Deserialization Vulnerability in SIMATIC STEP 7 (TIA Portal) before V18 Update 2
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new v…
-
High max 7.8SSA-824889 2 CVEs
SSA-824889: XML File Parsing Vulnerabilities in JT Open and PLM XML SDK
JT Open Toolkit and PLM XML SDK are affected by stack buffer overflow and null pointer dereference vulnerabilities that could be triggered while parsing XML file. If a user is tricked to open a malicious XML file with any of the affected products, this could …
-
High max 7.5
SSA-780073: Denial of Service Vulnerability in PROFINET Devices via DCE-RPC Packets
Products that include the Siemens PROFINET-IO (PNIO) stack in versions prior V06.00 are potentially affected by a denial of service vulnerability when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. Siemens has released new …
first Feb 11, 2020 -
High max 7.5
SSA-473245: Denial of Service Vulnerability in Profinet Devices
A vulnerability in affected devices could allow an attacker to perform a denial of service attack if a large amount of specially crafted UDP packets are sent to the device. Siemens has released new versions for several affected products and recommends to upda…
first Oct 8, 2019 -
High max 7.5
SSA-346262: Denial of Service Vulnerability in SNMP Interface of Industrial Products
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released new versions for several affected products an…
first Nov 23, 2017 -
High max 7.8
SSA-160243: Multiple Vulnerabilities in SINEC NMS before V2.0
SINEC NMS before V2.0 is affected by a code injection and a stored cross-site scripting vulnerability. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
first Oct 10, 2023 -
High max 7.8SSA-064222 15 CVEs
SSA-064222: Multiple File Parsing Vulnerabilities in Simcenter Femap before V2406
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS, BDF or BMP file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the appli…
-
High max 7.8SSA-900277 1 CVE
SSA-900277: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0012 and V2024.0001
Tecnomatix Plant Simulation contains a type confusion vulnerability that could be triggered when the application reads MODEL files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially also …
-
High max 7.5SSA-879734 8 CVEs
SSA-879734: Multiple Vulnerabilities in SCALANCE XM-400/XR-500 before V6.6.1
Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.8
SSA-871704: Multiple Vulnerabilities in SICAM Products
Multiple SICAM products are affected by vulnerabilities that could lead to privilege escalation, remote code execution or information loss namely: - SICAM A8000 device firmwares - CPC80 for CP-8000/CP-8021/CP-8022 - CPCI85 and OPUPI0 for CP-8031/CP-8050 - SIC…
first May 14, 2024 -
High max 7.8SSA-620338 1 CVE
SSA-620338: Buffer Overflow Vulnerability in SICAM AK3 / BC / TM
SICAM AK3/TM/BC devices are affected by a buffer overflow vulnerability that could allow an attacker to execute code in the context of the current process or lead to a denial of service condition. - SICAM AK3 device firmware- CPCX26 for CP-2016 - PCCX26 for C…
-
High max 8.2SSA-481506 1 CVE
SSA-481506: Information Disclosure Vulnerability in SIMATIC S7-200 SMART Devices
SIMATIC S7-200 SMART devices contain an information disclosure vulnerability which leaves the system susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack and eventually could allow an at…
-
High max 8.2
SSA-341067: Multiple vulnerabilities in third-party components in ST7 ScadaConnect before V1.1
Siemens has released a new version for ST7 ScadaConnect and recommends to update to the latest version.
-
High max 7.8
SSA-035466: Incorrect Permission Assignment in SICAM PAS/PQS
SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges. Siemens has released a new version for SICAM PAS/PQS and reco…
first Oct 10, 2023 -
High max 7.8SSA-976324 11 CVEs
SSA-976324: Multiple IGS File Parsing Vulnerabilities in PS/IGES Parasolid Translator Component before V27.1.215
PS/IGES Parasolid Translator Component contains multiple file parsing vulnerabilities that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lea…
-
High max 7.8SSA-923361 1 CVE
SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011
Tecnomatix Plant Simulation contains an out of bounds write vulnerability that could be triggered when the application reads MODEL files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially…
-
High max 7.8
SSA-871717: Multiple Vulnerabilities in Polarion ALM
Polarion ALM is affected by incorrect default path permissions in installation path, and improper authentication in the REST API endpoints of DOORS connector. An attacker could exploit the vulnerabilities for unauthenticated access, or privilege escalation. S…
first Feb 13, 2024 -
High max 7.8SSA-661579 2 CVEs
SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM or XML files. If a user is tricked to open a malicious file with the affected products, this could lead t…
-
High max 8.8
SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.2. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeas…
first Oct 10, 2023 -
High max 7.5
SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products
A vulnerability has been identified in the SIMATIC S7-1500 CPU family and related products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port…
first Dec 12, 2023 -
High max 7.8SSA-589937 8 CVEs
SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application is parsing PAR files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability t…
-
High max 7.8SSA-489698 1 CVE
SSA-489698: X_T File Parsing Vulnerability in Parasolid
Parasolid is affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to…
-
High max 7.8
SSA-382651: File Parsing Vulnerability in Solid Edge
Solid Edge is affected by an out of bounds read vulnerability that could be triggered when the application reads files that contains XT parts. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnera…
first Mar 12, 2024 -
High max 8.8
SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.3 and 23.1.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific …
first Nov 14, 2023 -
High max 7.5SSA-292022 2 CVEs
SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.4.1. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and reco…
-
High max 7.8SSA-258494 1 CVE
SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attack…
-
High max 7.8SSA-046364 3 CVEs
SSA-046364: X_T File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could le…
-
High max 8.8SSA-556635 47 CVEs
SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0
Siemens has released a new version for Telecontrol Server Basic that fixes multiple vulnerabilities.
-
High max 8.4
SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family
The SCALANCE W700 devices are affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information, to steal the victims session or to execute denial-of-service attacks. Siemens recommends count…
first Nov 14, 2023 -
High max 7.8SSA-222019 3 CVEs
SSA-222019: X_T File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an…
-
High max 7.5
SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens has released new versions fo…
first Mar 14, 2023 -
High max 7.6SSA-128433 2 CVEs
SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
-
High max 7.5SSA-918992 1 CVE
SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. S…
-
High max 7.5
SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products
A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released a new version for SINAMICS S210 (6SL5...) and recommends to up…
first Dec 12, 2023 -
High max 7.6SSA-653855 1 CVE
SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.