182 results · Clear filters · Feed
-
Medium max 6.8SSA-137528 1 CVE
SSA-137528: Authentication Bypass Vulnerability in Mendix SAML module
Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for…
-
Medium max 6.7
SSA-580366: DLL Sideloading Vulnerability in Siemens Software Center
The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution …
first Oct 15, 2026 -
Medium max 6.6
SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and …
first Apr 14, 2026 -
Medium max 5.8SSA-099819 1 CVE
SSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM Fuse
SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-establ…
-
Medium max 5.3SSA-055299 1 CVE
SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends …
-
Medium max 6.1
SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process
Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for the affected products …
first Jun 12, 2025 -
Medium max 6.5SSA-823812 1 CVE
SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released …
-
Medium max 6.1SSA-157465 1 CVE
SSA-157465: Reflected Cross-site scripting Vulnerability in Teamcenter
A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation …
-
Medium max 4.3SSA-781903 1 CVE
SSA-781903: Denial of Service Vulnerability in Desigo DXR and PXC Controllers
A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens h…
-
Medium max 6.8SSA-751328 2 CVEs
SSA-751328: Recoverable Hardcoded AES Master Key in Siemens LOGO! Soft Comfort
Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove proje…
-
Medium max 5.3
SSA-555707: Information Disclosure Vulnerability in Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains an information disclosure vulnerability when using the Power-on-Demand public license server. An attacker could access a system's host, user, and display name. Siemens has updated the public Power-on-Demand public license server.
first Aug 9, 2022 -
Medium max 6.7SSA-288252 1 CVE
SSA-288252: Unquoted Search Path Vulnerability in IAM Client
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to upd…
-
Medium max 5.4SSA-779310 1 CVE
SSA-779310: Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12
Mendix Studio Pro versions before V11.12 are affected by a file parsing vulnerability that could be triggered when the application reads specially crafted malicious project during the build pipeline. This could allow an attacker to execute arbitrary code in t…
-
Medium max 6.5
SSA-962515: Out of Bounds Read Vulnerability in Industrial Products
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition. Siemens has released new versions for s…
first May 14, 2024 -
Medium max 6.1SSA-139483 1 CVE
SSA-139483: File Upload Vulnerability in SIPROTEC 5 Using DIGSI5 Protocol
SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, u…
-
Medium max 6.8SSA-973901 1 CVE
SSA-973901: Arbitrary File Disclosure Vulnerability in Ruggedcom Rox Before V2.17.1
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affecte…
-
Medium max 5.3
SSA-904646: Sensitive Data Exposure Vulnerability in SIPROTEC 5 Devices
A sensitive data exposure vulnerability in SIPROTEC 5 can allow an attacker to retrieve sensitive session data from browser history, logs, or other storage mechanisms, potentially leading to unauthorized access. Siemens is preparing fix versions and recommend…
first Jul 8, 2025 -
Medium max 5.3SSA-786884 1 CVE
SSA-786884: Insufficient Randomness in Session Identifier Vulnerability in SIPROTEC 5
The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. T…
-
Medium max 5.3
SSA-913875: Frame Aggregation and Fragmentation Vulnerabilities in 802.11
Twelve vulnerabilities in the implementation of frame aggregation and fragmentation of the 802.11 standard, under the name of FragAttacks, have been published. Successful exploitation of these vulnerabilities could allow an attacker within Wi-Fi range to forg…
first Jul 13, 2021 -
Medium max 5.5
SSA-186293: XML External Entity (XXE) Injection Vulnerability in SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER
SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER are affected by an XXE injection vulnerability that could allow an attacker to access arbitrary application files. Siemens has released new versions for several affected products and recommends to update…
first Aug 12, 2025 -
Medium max 6.3
SSA-027652: Privilege Escalation Vulnerability in SINAMICS Drives
Siemens SINAMICS G220, SINAMICS S210, and SINAMICS S200 contains a privilege escalation vulnerability that could allow users to escalate their privileges. Siemens has released new versions for the affected products and recommends to update to the latest versi…
first Sep 9, 2025 -
Medium max 6.3SSA-625934 1 CVE
SSA-625934: Improper Access Control Vulnerability in the Webhooks Implementation of Siveillance Video Management Servers
The Webhooks implementation of Siveillance Video Management Servers contains a vulnerability that could allow an authenticated remote attacker with read-only privileges to achieve full access to Webhooks API. Siemens has released new versions for the affected…
-
Medium max 6.5
SSA-693776: Multiple Vulnerabilities in Industrial Communication Devices based on SINEC OS before V3.2
Several Industrial Communication Devices based on SINEC OS before V3.2 contain multiple vulnerabilities that could allow an attacker to circumvent authorization checks and perform actions that exceed the permissions of the "guest" role. Siemens has released n…
first Jun 10, 2025 -
Medium max 6.7SSA-882673 2 CVEs
SSA-882673: Multiple Vulnerabilities in SINEC Security Monitor before V4.10.0
SINEC Security Monitor before V4.10.0 contains multiple vulnerabilities. Siemens has released a new version for SINEC Security Monitor and recommends to update to the latest version.
-
Medium max 4.3SSA-763474 1 CVE
SSA-763474: Denial of Service Vulnerability in Ruggedcom ROS devices before V5.10.1
Ruggedcom ROS devices contain a temporary denial of service vulnerability that could allow an attacker to crash and restart the device. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
Medium max 6.8SSA-734261 1 CVE
SSA-734261: Authentication Bypass Vulnerability in Energy Services Using Elspec G5DFR
Energy Services from Siemens (previously known as Managed Applications and Services), sell solutions using Elspec G5 devices that allows a person with physical access to the device to reset the Admin password by inserting a USB drive (containing a publicly do…
-
Medium max 4.3SSA-626856 2 CVEs
SSA-626856: Multiple Vulnerabilities in SINEMA Remote Connect Sever Before V3.2 SP4
SINEMA Remote Connect Server Before V3.2 SP4 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
Medium max 6.2SSA-420375 1 CVE
SSA-420375: Improper Integrity Check of Firmware Updates in Building X - Security Manager Edge Controller (ACC-AP)
Building X - Security Manager Edge Controller (ACC-AP) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens is preparing fix versions and recommends sp…
-
Medium max 6.3SSA-356310 2 CVEs
SSA-356310: Multiple Vulnerabilities in Gridscale X Prepay
Gridscale X Prepay contains multiple vulnerabilities that could allow an attacker to enumerate valid user names and to bypass locked-out user sessions. Siemens has released a new version for Gridscale X Prepay and recommends to update to the latest version.
-
Medium max 5.7SSA-190588 1 CVE
SSA-190588: Cross-Site Scripting Vulnerability in Mendix Rich Text Widget
Mendix RichText editor contain a cross-site scripting vulnerability. Siemens has released a new version for Mendix RichText and recommends to update to the latest version.
-
Medium max 5.9
SSA-750499: Weak Encryption Vulnerability in SIPROTEC 5 Devices
The SIPROTEC 5 devices are supporting weak encryption. This could allow an unauthorized attacker in a man-in-the-middle position to read any data passed over the connection between legitimate clients and the affected device. Siemens has released new versions …
first Jul 9, 2024 -
Medium max 6.8
SSA-687955: Accessible Development Shell via Physical Interface in SIPROTEC 5
Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted. This could allow an unauthenticated attacker with physical access to an affected device to execute arbitrary commands on the…
first Feb 11, 2025 -
Medium max 5.3
SSA-552874: Denial of Service Vulnerability in SIPROTEC 5 Devices
Devices of the SIPROTEC 5 family contain a vulnerability related to secure client-initiated renegotiation. This could allow an unauthenticated attacker to cause a denial of service condition for the duration of the attack. Siemens has released new versions fo…
first Dec 13, 2022 -
Medium max 6.3
SSA-225578: Improper Access Control Vulnerability in SICAM GridEdge Before V2.7.3
SICAM GridEdge contains an improper access control vulnerability. This could allow persons with local access to the host system to inject an SSH key. Siemens has released a new version for SICAM GridEdge (Classic) and recommends to update to the latest versio…
first Jul 12, 2022 -
Medium max 5.5SSA-201498 2 CVEs
SSA-201498: Multiple Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices Before V3.11
The web server of SICAM P850 and SICAM P855 devices, versions before V3.11, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of…
-
Medium max 6.5
SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affec…
first Jan 14, 2025 -
Medium max 4.7
SSA-876787: Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs
Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitima…
first Oct 8, 2024 -
Medium max 6.2
SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for produc…
first May 23, 2025 -
Medium max 5.3
SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs
Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has re…
first Oct 8, 2024 -
Medium max 5.3SSA-916339 1 CVE
SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.