182 results · Clear filters · Feed
-
Medium max 6.3
SSA-707630: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager Before V3.3
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
first Aug 12, 2025 -
Medium max 5.3
SSA-914892: Race Condition Vulnerability in Basic Authentication Implementation of Mendix Runtime
The basic authentication mechanism of Mendix Runtime contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures. Siemens has released new versions for several affected products and…
first Nov 12, 2024 -
Medium max 5.3
SSA-787941: Denial of Service Vulnerability in RUGGEDCOM ROS devices
RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP conn…
first Nov 8, 2022 -
Medium max 6.7
SSA-764417: Weak Encryption Vulnerability in RUGGEDCOM ROS Devices
The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affecte…
first Mar 8, 2022 -
Medium max 4.1SSA-665108 1 CVE
SSA-665108: Arbitrary File Upload Vulnerability in RUGGEDCOM ROX II
RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files…
-
Medium max 6.2SSA-529291 2 CVEs
SSA-529291: Information Disclosure Vulnerabilities in SICAM Q100/Q200
SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new v…
-
Medium max 4.3
SSA-460466: Denial of Service Vulnerability in TIA Project-Server and TIA Portal
A vulnerability in TIA Project Server and TIA Portal could allow an attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further …
first Jul 8, 2025 -
Medium max 4.9
SSA-353002: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family is affected by multiple vulnerabilities. CVE-2023-44318 and CVE-2023-44321 were previously published as part of SSA-699386. Siemens has released new versions for several affected products and recommends t…
first Mar 12, 2024 -
Medium max 5.3
SSA-097435: Usernames Disclosure Vulnerability in Mendix Runtime
Mendix Runtime contains an observable response discrepancy vulnerability when validating usernames during authentication. This could allow unauthenticated remote attackers to distinguish between valid and invalid usernames. Siemens has released new versions f…
first Sep 10, 2024 -
Medium max 5.3
SSA-725549: Denial of Service of ICMP in Industrial Devices
A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through s…
first Apr 8, 2025 -
Medium max 6.5SSA-626991 1 CVE
SSA-626991: Denial of Service Vulnerability in SIMATIC CN 4100 before V4.0
A vulnerability in SIMATIC CN 4100 could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
-
Medium max 6.7
SSA-426509: Multiple Local Code Execution Vulnerabilities in Questa and ModelSim
Questa and ModelSim (incl. OEM Editions) are affected by multiple vulnerabilities that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the l…
first Oct 8, 2024 -
Medium max 5.3
SSA-874353: Entity Enumeration Vulnerability in Mendix Runtime
Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has rele…
first Apr 8, 2025 -
Medium max 4.3SSA-633269 1 CVE
SSA-633269: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1
Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the "guest" role. Siemens has released new versions fo…
-
Medium max 5.5SSA-552330 1 CVE
SSA-552330: System Configuration Password Reset in Siveillance Video V2024 R1
The installer of Siveillance Video V2024 R1 resets the system configuration password when updating from older versions of Siveillance Video. This could inadvertently remove the password protection from system configuration files, also affecting backup data se…
-
Medium max 6.5SSA-828116 1 CVE
SSA-828116: Denial of Service Vulnerability in BACnet ATEC Devices
BACnet ATEC devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's normal operation. S…
-
Medium max 4.7SSA-718393 1 CVE
SSA-718393: Partial Denial of Service Vulnerability in APOGEE PXC and TALON TC Series (BACnet) Devices
APOGEE PXC and TALON TC Series (BACnet) Devices devices start sending unsolicited BACnet broadcast messages after processing a specific BACnet createObject request. This could allow an attacker residing in the same BACnet network to send a specially crafted m…
-
Medium max 6.5SSA-668154 1 CVE
SSA-668154: Denial of Service Vulnerability in MS/TP Point Pickup Module
MS/TP Point Pickup Module devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's norma…
-
Medium max 6.5SSA-162255 4 CVEs
SSA-162255: Multiple Vulnerabilities in Polarion Before V2410
Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix th…
-
Medium max 6.7SSA-525431 2 CVEs
SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to …
-
Medium max 5.3
SSA-195895: User Enumeration Vulnerability in the Webserver of SIMATIC Products
The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for the affected products and recommends to update to …
first Feb 11, 2025 -
Medium max 6.8SSA-507653 2 CVEs
SSA-507653: Improper Access Control Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation do not properly limit the access of the simulation model to the filesystem. This could allow an unauthorized attacker to read or delete arbitrary files or the entire filesystem of the device. Siemens has released new versio…
-
Medium max 9.1SSA-073066 2 CVEs
SSA-073066: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP3
SINEMA Remote Connect Server before V3.2 SP3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
Medium max 6.2SSA-647005 1 CVE
SSA-647005: Memory Corruption Vulnerability in OpenV2G
The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.
-
Medium max 6.7SSA-637914 1 CVE
SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1
Questa and ModelSim (incl. OEM Editions) are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest ver…
-
Medium max 4.6SSA-111547 1 CVE
SSA-111547: Cleartext Storage of Sensitive Information Vulnerability in SIPROTEC 5
Affected SIPROTEC 5 devices do not encrypt certain data within the on-board flash storage on their PCB. This could allow an attacker with physical access to read the sensitive information from the filesystem of the device. Siemens is preparing fix versions an…
-
Medium max 6.2
SSA-730482: Denial of Service Vulnerability in SIMATIC WinCC
A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest…
first Apr 9, 2024 -
Medium max 4.6
SSA-482757: Missing Immutable Root of Trust in S7-1500 CPU devices
Affected models of the S7-1500 CPU product family do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device could use…
first Jan 10, 2023 -
Medium max 5.3
SSA-446448: Denial of Service Vulnerability in PROFINET Stack Integrated on Interniche Stack
The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, contains a vulnerability that could allow an attacker to cause a denial of service condition on affected industrial products. Siemens has released new versions for several affected produ…
first Apr 12, 2022 -
Medium max 4.7SSA-416411 1 CVE
SSA-416411: Cross-Site Scripting Vulnerability in Industrial Edge Management
Industrial Edge Management is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Siemens recommends countermeasures for products whe…
-
Medium max 6.5
SSA-981975: Information Disclosure Vulnerability in Intel-CPUs (CVE-2022-40982) Impacting SIMATIC IPCs
Several Intel-CPU based SIMATIC IPCs are affected by an information exposure vulnerability (CVE-2022-40982) in the CPU that could allow an authenticated local user to potentially read other users' data [1]. The issue is also known as "Gather Data Sampling" (G…
first Sep 12, 2023 -
Medium max 5.5SSA-701627 2 CVEs
SSA-701627: XXE Injection Vulnerabilities in COMOS
COMOS is affected by XXE injection vulnerabilities that could allow an attacker to extract arbitrary application files. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specifi…
-
Medium max 5.9
SSA-264814: Timing Based Side Channel Vulnerability in the OpenSSL RSA Decryption in SIMATIC Products
Several SIMATIC products are affected by a timing based side channel vulnerability in the OpenSSL RSA Decryption (CVE-2023-4304), as disclosed on 2023-02-07 at https://www.openssl.org/news/secadv/20230207.txt. Siemens has released new versions for several aff…
first Aug 8, 2023 -
Medium max 4.6SSA-128393 1 CVE
SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050
The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware. Siemens has released new firmware and hardware versions for the affected products and recommen…
-
Medium max 6.2
SSA-042050: Know-How Protection Mechanism Failure in TIA Portal
The know-how protection feature in Totally Integrated Automation Portal (TIA Portal) does not properly update the encryption of existing program blocks when a project file is updated. This could allow attackers with access to the project file to recover previ…
first Jun 13, 2023 -
Medium max 5.9
SSA-883918: Information Disclosure Vulnerability in SIMATIC WinCC
Multiple versions of SIMATIC WinCC and SIMATIC PCS 7 do not properly handle certain requests to their web application (WinCC WebNavigator, PCS 7 Web Server, and PCS 7 Web Diagnostics Server), which may lead to the leak of privileged information. This could al…
first Jul 9, 2024 -
Medium max 6.8SSA-230445 1 CVE
SSA-230445: Stored XSS Vulnerability in OZW Web Servers Before V5.2
OZW672 and OZW772 Web Server versions before V5.2 contain a stored cross-site scripting (XSS) vulnerability that could allow an authenticated remote attacker to inject arbitrary JavaScript code that is later executed by another authenticated victim user with …
-
Medium max 5.5SSA-000297 2 CVEs
SSA-000297: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.6
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
-
Medium max 6.7SSA-438590 1 CVE
SSA-438590: Buffer Overflow Vulnerability in Siveillance Video Camera Drivers
Several camera device drivers in the Siveillance Video Device Pack contain a buffer overflow vulnerability that could be exploited under strict conditions. This could allow an attacker to execute code with the permissions of the Recording Server user. Siemens…
-
Medium max 4.6
SSA-921449: Plaintext Storage of a Password Vulnerability in LOGO! V8.3 BM Devices
LOGO! V8.3 BM (incl. SIPLUS variants) devices contain a plaintext storage of a password vulnerability. This could allow an attacker with phyiscal access to an affected device to extract user-set passwords from an embedded storage IC. Siemens has released new …
first Aug 13, 2024