15 results · Clear filters · Feed
-
Low max 2.1SSA-651988 1 CVE
SSA-651988: Double Free vulnerability in Fortigate NGFW before V7.6.9 on RUGGEDCOM APE1808 Devices
Fortinet has published information on a Double Free vulnerability in FortiOS. This advisory lists the related Siemens Industrial products. Siemens recommends to update Fortigate NGFW to V7.6.9 or later following the secure update recommendation procedure. Con…
-
Low max 3.7
SSA-280834: Improper OpenVPN Credential Validation Vulnerability in SCALANCE M-800 and SC-600 Families
SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Mar 11, 2025 -
Low max 3.7SSA-981622 1 CVE
SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products a…
-
Low max 2.2
SSA-726617: Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module
The Mendix OIDC SSO module grants read and write access to all tokens exclusively to the Administrator role and could result in privilege misuse by an adversary modifying the module during Mendix development. Siemens has released new versions for several affe…
first May 13, 2025 -
Low max 2.6SSA-126399 1 CVE
SSA-126399: Improper Access Control Vulnerability in Heliox EV Chargers
Heliox EV Chargers listed below contain improper access control vulnerability that could allow an attacker to reach unauthorized services via the charging cable. Siemens has released new versions for the affected products and recommends to update to the lates…
-
Low max 3.1SSA-494539 2 CVEs
SSA-494539: Multiple Vulnerabilities in SINEC OS
SINEC OS is affected by multiple vulnerabilities due to open UDP ports, which could allow an attacker to access non-sensitive information without authentication or potentially cause temporary denial of service. Siemens is preparing fix versions and recommends…
-
Low max 2.4SSA-894058 1 CVE
SSA-894058: Improper Bandwidth Limitation of Network Packets Over Local USB Port Vulnerability in SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcin…
-
Low max 3.7SSA-395348 1 CVE
SSA-395348: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2
TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service co…
-
Low max 3.3SSA-319319 1 CVE
SSA-319319: Denial of Service Vulnerability in TIA Administrator
TIA Administrator creates temporary download files in a directory with insecure permissions. This could allow any authenticated attacker on Windows to disrupt the update process. Siemens has released a new version for TIA Administrator and recommends to updat…
-
Low max 3.9SSA-508677 1 CVE
SSA-508677: Use of Obsolete Function Vulnerability in SIMATIC WinCC before V8
Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement stat…
-
LowSSA-870917 1 CVE
SSA-870917: Improper Access Control Vulnerability in Mendix
When querying the database, it is possible to sort the results using a protected field. With this an authenticated attacker could extract information about the contents of a protected field. Siemens has released updates for the affected products and recommend…
-
Low
SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products
A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, …
first Dec 10, 2019 -
LowSSA-173318 1 CVE
SSA-173318: Unquoted Search Path Vulnerability in SICAM PQ Analyzer
SICAM PQ Analyzer uses an unquoted registry entry and is thus vulnerable to an unquoted search path vulnerability. Siemens has released an update for the SICAM PQ Analyzer and recommends to update to the latest version.
-
LowSSA-740908 2 CVEs
SSA-740908: File Parsing Vulnerabilities in JT Translator in NX
Siemens NX is affected by two vulnerabilities that could be triggered when the application reads JT files. If a user is tricked to open a malicious file with the affected application, this could lead to an access violation, and potentially also to arbitrary c…
-
LowSSA-997732 1 CVE
SSA-997732: Modfem File Parsing Vulnerability in Simcenter Femap before V2021.2
Siemens Simcenter Femap is affected by a vulnerability that could be triggered when the application reads modfem files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage this vulnerability to leak informat…