182 results · Clear filters · Feed
-
Medium max 5.5
SSA-783481: Denial-of-Service Vulnerability in LOGO! 8 BM
A Denial-of-Service vulnerability has been identified in LOGO! 8 BM. This vulnerability could allow an attacker to crash a device, if a user is tricked into loading a malicious project file onto an affected device. The vulnerability is related to the hardware…
first Mar 9, 2021 -
Medium max 6.0SSA-254396 1 CVE
SSA-254396: Vulnerability in Nozomi Guardian/CMC Before 24.3.1 on RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 24.2.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and r…
-
Medium max 6.8
SSA-148641: XPath Constraint Vulnerability in Mendix Runtime
A XPath Constraint vulnerability in the Mendix Runtime was discovered, that can affect the running applications. The vulnerability could allow a malicious user to deduce contents of inaccessible attributes and modify sensitive data. Siemens has released new v…
first Mar 8, 2022 -
Medium max 4.3SSA-869574 1 CVE
SSA-869574: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP2
SINEMA Remote Connect Server before V3.2 SP2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
Medium max 4.6
SSA-792319: Missing Read Out Protection in SENTRON 7KM PAC3x20 Devices
The read out protection of the internal flash of affected devices was not properly set at the end of the manufacturing process. An attacker with physical access to the device could read out the data. Siemens has released new versions for the affected products…
first Mar 12, 2024 -
Medium max 6.5SSA-765405 6 CVEs
SSA-765405: Multiple Vulnerabilities in SIMATIC RFID Readers
SIMATIC RFID Readers contain multiple vulnerabilities that could allow an attacker to cause Denial-of-Service, exploit hidden functionality and information exposure. Siemens has released new versions for the affected products and recommends to update to the l…
-
Medium max 6.5
SSA-753746: Denial of Service Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Two null point dereference vulnerabilities affect multiple SIMATIC software products. These could allow an attacker to cause a persistent denial of service condition in the RPC Server of these products. Siemens has released new versions for the affected produ…
first Feb 13, 2024 -
Medium max 5.9SSA-423808 3 CVEs
SSA-423808: Multiple NULL Pointer Dereference Vulnerabilities in Industrial Products
Multiple NULL pointer dereference vulnerabilities in the affected products could allow an attacker with network access to the webserver, to perform a denial of service attack. Siemens has released new versions for several affected products and recommends to u…
-
Medium max 6.5
SSA-293562: Denial of Service Vulnerabilities in PROFINET DCP Implementation of Industrial Products
Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to t…
first May 8, 2017 -
Medium max 5.5SSA-097786 1 CVE
SSA-097786: Insertion of Sensitive Information into Log File Vulnerability in SINUMERIK systems
SINUMERIK systems, that have been provisioned with Create MyConfig (CMC), are affected by a Insertion of Sensitive Information into Log File vulnerability. When using a CMC package on a NCU or on an IPC the password used in the CMC package or typed in manuall…
-
Medium max 5.3
SSA-088132: Denial of Service Vulnerability in the OPC UA Server Implementations of Several Industrial Products
Unified Automation .NET based OPC UA Server SDK before 3.2.2 used in several industrial products are affected by a similar vulnerability as documented in CVE-2023-27321 for the OPC Foundation UA .NET Standard implementation. A successful attack may lead to hi…
first Jul 9, 2024 -
Medium max 6.7SSA-720392 3 CVEs
SSA-720392: Multiple Vulnerabilities in Third-Party Components in Location Intelligence Before V4.4
Location Intelligence before V4.4 is affected by multiple vulnerabilities that could allow an attacker in an on-path position to read and modify data passed over the connection between legitimate clients and the affected product or brute force user passwords.…
-
Medium max 6.7
SSA-640968: Untrusted Search Path Vulnerability in TIA Project-Server formerly known as TIA Multiuser Server
TIA Project-Server formerly known as TIA Multiuser Server contains an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path. Siemens has r…
first Feb 14, 2023 -
Medium max 6.5SSA-779936 1 CVE
SSA-779936: Catalog-Profile Deserialization Vulnerability in Siemens Engineering Platforms before V19
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released new ver…
-
Medium max 6.3SSA-313039 1 CVE
SSA-313039: Deserialization Vulnerability in STEP 7 Safety before V19
Affected applications do not properly restrict the .NET BinaryFormatter when deserializing user-controllable input. This could allow an attacker to cause a type confusion and execute arbitrary code within the affected application. Siemens has released a new v…
-
Medium max 5.9SSA-540640 1 CVE
SSA-540640: Improper Privilege Management Vulnerability in Mendix Runtime
Apps built with Mendix Runtime >= V9.3 could allow users with the capability to manage a role to elevate the access rights of users with that role. Successful exploitation requires to guess the id of a target role which contains the elevated access rights. Si…
-
Medium max 5.6SSA-238730 3 CVEs
SSA-238730: Out-of-Bounds Write Vulnerabilities in SITOP UPS1600 before V2.5.4
Multiple out-of-bounds vulnerabilities in third-party components are affecting SITOP UPS1600 before V2.5.4. Attackers could exploit these vulnerabilities and cause limited impact in the affected systems. Siemens has released new versions for the affected prod…
-
Medium max 6.5SSA-925850 1 CVE
SSA-925850: Improper Access Control in Polarion ALM
The Apache Lucene based query engine in Polarion ALM lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects. Siemens has released a new version for Polarion ALM and recommends to update to the la…
-
Medium max 5.3
SSA-665034: Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.3.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and reco…
first Feb 13, 2024 -
Medium max 5.5SSA-145196 1 CVE
SSA-145196: Authorization Bypass Vulnerability in Siveillance Control
Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new ver…
-
Medium max 5.9
SSA-772220: OpenSSL Vulnerabilities in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released new…
first Jul 13, 2021 -
Medium max 6.6SSA-583634 1 CVE
SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup. Siemens ha…
-
Medium max 5.5
SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate u…
first Dec 12, 2023 -
Medium max 4.2SSA-887801 1 CVE
SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal)
Siemens has released a new version of STEP 7 (TIA Portal) that fixes an information disclosure vulnerability. A local attacker could gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the har…
-
Medium max 6.8SSA-084182 1 CVE
SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime
Mendix Runtime contains a capture-replay flaw which could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify o…
-
Medium max 6.7SSA-784849 2 CVEs
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for produc…
-
Medium max 5.3SSA-295483 1 CVE
SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module
The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium
SSA-285795: Denial of Service in OPC-UA in Industrial Products
A vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has rel…
first May 10, 2022 -
Medium max 5.5SSA-646240 1 CVE
SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console
The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems…
-
Medium max 6.5
SSA-478960: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers
The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for sever…
first Nov 8, 2022 -
Medium max 4.6SSA-482956 1 CVE
SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to updat…
-
Medium max 5.9
SSA-632164: External Entity Injection Vulnerability in Polarion ALM
Polarion ALM is vulnerable to XML External Entity (XXE) injection attack that could allow an attacker to potentially disclose confidential data. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
first Apr 11, 2023 -
Medium max 6.5
SSA-592007: Denial of Service Vulnerability in Industrial Products
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 ac…
first Mar 20, 2018 -
Medium max 5.4
SSA-792594: Host Header Injection Vulnerability in Polarion ALM
Polarion ALM contains a misconfiguration in its default Apache HTTP Server configuration that could allow an attacker to perform host header injection attacks. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
first Dec 13, 2022 -
Medium max 5.3SSA-699404 1 CVE
SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module
The Mendix Forgot Password module contains an observable response discrepancy issue that could allow an attacker to retrieve sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium
SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs
SIMATIC CP 343-1 Advanced/CP-443-1 Advanced devices and SIMATIC S7-300/S7-400 CPUs are affected by two vulnerabilities. One of the vulnerabilities could allow remote attackers to perform operations as an authenticated user under certain conditions. Siemens ha…
first Nov 21, 2016 -
Medium max 6.2SSA-511182 1 CVE
SSA-511182: Use of Static TLS Certificate Known Hard Coded Private Keys in Adaptec Maxview Application
The Adaptec Maxview application shipped with affected SIMATIC IPCs contains a hard coded, non-unique certificate to secure HTTPS connections between the browser and the local Maxview configuration application. A local attacker may use this key to decrypt inte…
-
Medium max 6.7SSA-479249 1 CVE
SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the aff…
-
Medium max 5.3
SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0
RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP conn…
first Sep 13, 2022 -
Medium max 6.6SSA-260625 2 CVEs
SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2
RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that could allow authenticated remote attackers to perform unauthorized actions (CVE-2023-27309) or escalate privileges (CVE-2023-27310). Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to…