182 results · Clear filters · Feed
-
Medium max 5.9SSA-252808 1 CVE
SSA-252808: XPath Constraint Vulnerability in Mendix Runtime
Mendix applications contain an improper access control vulnerability that could allow an attacker to bypass XPath constraints and retrieve information using XPath queries that trigger errors. Siemens has released updates for the affected products and recommen…
-
Medium max 5.4
SSA-547714: Argument Injection Vulnerability in SIMATIC WinCC OA Ultralight Client
SIMATIC WinCC OA contains an argument injection vulnerability that could allow an authenticated remote attacker to inject arbitrary parameters, when starting the Ultralight Client via the web interface (e.g., open attacker chosen panels with the attacker's cr…
first Dec 13, 2022 -
Medium max 5.3
SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families
SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affec…
first Feb 11, 2020 -
Medium
SSA-951513: Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, X-200RNA and X-200 Switch Families
Several SCALANCE X switches contain a vulnerability that could allow an attacker to perform administrative actions if the victim is tricked into clicking on a website controlled by the attacker. The attack only works if the victim has an authenticated session…
first Feb 11, 2020 -
Medium
SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jun 12, 2018 -
Medium max 6.5SSA-436469 1 CVE
SSA-436469: TCP Vulnerability in APOGEE/TALON Field Panels
A TCP sequence vulnerability in the APOGEE PXC and TALON TC series of products could allow an attacker to execute a denial of service attack by sending specially crafted packets to the device. Siemens has released updates for the affected products and recomme…
-
Medium max 6.1SSA-274282 1 CVE
SSA-274282: Cross Site Scripting Vulnerability in PLM Help Server V4.2
The Siemens PLM Help Server V4.2 for documentation contains a reflected cross-site scripting vulnerability. This product has reached end of life, and security vulnerabilities are no longer patched. Siemens has released a new version of Documentation Server t…
-
Medium max 6.6SSA-371761 1 CVE
SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update f…
-
Medium max 6.5
SSA-362164: Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
The networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) use Initial Sequence Numbers for TCP-Sessions that are predictable. Siemens has released updates for several affected products and recommends to update to the latest versions.…
first Feb 9, 2021 -
MediumSSA-928782 1 CVE
SSA-928782: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.
-
Medium
SSA-179516 OpenSSL Vulnerability in Industrial Products
Several Siemens industrial products are affected by a vulnerability in OpenSSL, that could result in data being sent out unencrypted by the SSL/TLS record layer. Siemens has released updates for the affected products and recommends to update to the latest ver…
first Aug 7, 2018 -
Medium
SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest …
first Feb 8, 2022 -
Medium
SSA-841348: Multiple Vulnerabilities in the UMC Component
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execut…
first Jul 14, 2020 -
Medium max 7.5
SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet avai…
first Nov 10, 2020 -
Medium
SSA-232418: Vulnerabilities in SIMATIC S7-1200 and SIMATIC S7-1500 CPU Families
Two vulnerabilities have been identified in the SIMATIC S7-1200/S7-1500 CPU families and related products. One vulnerability (CVE-2019-10943) could allow an attacker with network access to affected devices to modify the user program stored on these devices su…
first Aug 13, 2019 -
Medium max 5.3SSA-185638 1 CVE
SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0…
-
MediumSSA-610768 1 CVE
SSA-610768: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module
The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability. Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.
-
Medium
SSA-557804: Mirror Port Isolation Vulnerability in SCALANCE X Switches
A vulnerability was identified in several SCALANCE X switches that could allow an attacker to feed information into a network via the mirror port with the monitor barrier feature enabled. Siemens has released updates for the affected products and recommends t…
first Mar 12, 2019 -
MediumSSA-492173 1 CVE
SSA-492173: Expression Injection Vulnerability in Mendix Applications
An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix…
-
MediumSSA-433782 1 CVE
SSA-433782: Improper Access Control Vulnerability in Mendix
An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has r…
-
Medium
SSA-414513: Information Disclosure Vulnerability in Mendix
An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Apr 12, 2022 -
MediumSSA-911567 2 CVEs
SSA-911567: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update…
-
Medium
SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versi…
first Sep 14, 2021 -
MediumSSA-401167 1 CVE
SSA-401167: Cross-site scripting Vulnerability in Teamcenter Active Workspace
Teamcenter Active Workspace is affected by a cross site scripting vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
MediumSSA-145224 1 CVE
SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to …
-
MediumSSA-736385 1 CVE
SSA-736385: Memory Corruption Vulnerability in OpenV2G
The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.
-
Medium max 7.5
SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28
SIMATIC CP 1543-1 devices before V2.0.28 contain two vulnerabilities that could allow authorized users to escalate their privileges on the CP or create a denial of service condition. Siemens has released updates for the affected products and recommends to upd…
first Nov 18, 2016 -
Medium
SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM
The Subversion Webclient in Polarion ALM contains a cross-site scripting vulnerability, that could be triggered by an attacker by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Subversion Webclient in Po…
first Mar 8, 2022 -
MediumSSA-350757 1 CVE
SSA-350757: Improper Access Control Vulnerability in TIA Portal Affecting S7-1200 and S7-1500 CPUs Web Server (Incl. Related ET200 CPUs and SIPLUS variants)
An attacker could achieve privilege escalation on the web server of certain devices configured by SIMATIC STEP 7 (TIA Portal) due to incorrect handling of the webserver's user management configuration during downloading. This only affects the S7-1200 and S7-1…
-
MediumSSA-316850 1 CVE
SSA-316850: Unauthenticated File Access in SICAM A8000 Devices
SICAM A8000 CP-8050 and CP-8031 devices contain vulnerabilities that could allow an attacker to access files without authentication. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium
SSA-703715: Information Disclosure Vulnerability in Climatix POL909 (AWM and AWB)
Climatix POL909 (AWM and AWB) contains an information disclosure vulnerability that could allow a man-in-the-middle attacker to read sensitive data, such as administrator credentials, or modify data in transit. Siemens has released an update for Climatix POL9…
first Nov 9, 2021 -
Medium max 6.5
SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400
SIMOTICS CONNECT 400 is affected by DNS Client vulnerabilities as initially reported in Siemens Security Advisory SSA-705111 (https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf) for the DNS Module in Nucleus RTOS. Siemens has released updates for …
first Apr 13, 2021 -
Medium
SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2)
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-202…
first Mar 9, 2021 -
Medium
SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerab…
first Sep 8, 2020 -
MediumSSA-252466 3 CVEs
SSA-252466: Multiple Vulnerabilities in Climatix POL909 (AWM and AWB)
Multiple vulnerabilities have been identified in the Climatix POL909 (AWM and AWB) that could allow an unauthenticated attacker to hijack and redirect users to a malicious webpage, or allow an authenticated attacker to access sensitive files. Siemens has rele…
-
MediumSSA-831168 1 CVE
SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4
A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4. Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.
-
MediumSSA-654775 1 CVE
SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server
An open redirect vulnerability in SINEMA Remote Connect Server could allow an attacker to steal logon credentials with a specially crafted malicious link. Siemens has released software update for the SINEMA Remote Connect Server and recommends to update to th…
-
Medium
SSA-316383: NumberJack Vulnerability in LOGO! CMR and SIMATIC RTU 3000 devices
A vulnerability has been identified in the underlying TCP/IP stack of LOGO! CMR and SIMATIC RTU 3000 devices. It could allow an attacker with network access to the LAN interface of an affected device to hijack an ongoing connection or spoof a new one. The WAN…
first Sep 14, 2021 -
Medium max 6.5
SSA-705111: Multiple Vulnerabilities (NAME:WRECK) in the DNS Module of Nucleus RTOS
Security researchers discovered and disclosed 9 vulnerabilities in several DNS implementations, also known as “NAME:WRECK” vulnerabilities. The vulnerabilities described in this advisory are from this set. The DNS client of affected products contains multiple…
first Apr 13, 2021 -
MediumSSA-439673 1 CVE
SSA-439673: Information Disclosure Vulnerability in SIPROTEC 5 Devices
An information disclosure vulnerability in SIPROTEC 5 products could allow an unauthenticated attacker to read device information. Only devices with the hardware variants CP050, CP100 and CP300 are affected. The DIGSI engineering tool can be used to identify …