874 results · Feed
-
Critical max 10.0
SSA-968170: Remote Code Execution Vulnerability in SIMATIC STEP 7 V5.x and Derived Products
SIMATIC STEP 7 and PCS 7 contain a database management system that could allow remote users to use embedded functions of the database (local or in a network share) that have impact on the server. An attacker with network access to the server network could lev…
first Jun 13, 2023 -
Critical max 10.0SSA-953710 3 CVEs
SSA-953710: Vulnerabilities in the Network Communication Stack in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems
Several products used in Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems contain buffer overflow vulnerabilities in the network communication stack. Successful exploitation of the vulnerabilities could allow an unauthenticated attacker, who …
-
Medium max 6.5SSA-925850 1 CVE
SSA-925850: Improper Access Control in Polarion ALM
The Apache Lucene based query engine in Polarion ALM lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects. Siemens has released a new version for Polarion ALM and recommends to update to the la…
-
High max 7.8SSA-923361 1 CVE
SSA-923361: MODEL File Parsing Vulnerability in Tecnomatix Plant Simulation before V2302.0011
Tecnomatix Plant Simulation contains an out of bounds write vulnerability that could be triggered when the application reads MODEL files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potentially…
-
Critical max 9.8SSA-916916 9 CVEs
SSA-916916: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.5
The RUGGEDCOM CROSSBOW server application before V5.5 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, or upload of arbitrary files to the application's file system. The majority o…
-
High max 7.8
SSA-871717: Multiple Vulnerabilities in Polarion ALM
Polarion ALM is affected by incorrect default path permissions in installation path, and improper authentication in the REST API endpoints of DOORS connector. An attacker could exploit the vulnerabilities for unauthenticated access, or privilege escalation. S…
first Feb 13, 2024 -
Medium max 5.3
SSA-665034: Vulnerability in Nozomi Guardian/CMC before 23.3.0 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.3.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and reco…
first Feb 13, 2024 -
High max 7.8SSA-661579 2 CVEs
SSA-661579: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM or XML files. If a user is tricked to open a malicious file with the affected products, this could lead t…
-
High max 8.8
SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.2. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeas…
first Oct 10, 2023 -
High max 7.5
SSA-592380: Denial of Service Vulnerability in SIMATIC S7-1500 CPUs and related products
A vulnerability has been identified in the SIMATIC S7-1500 CPU family and related products that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerability, an attacker must have access to the affected devices on port…
first Dec 12, 2023 -
High max 7.8SSA-589937 8 CVEs
SSA-589937: Multiple Memory Corruption Vulnerabilities in Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application is parsing PAR files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability t…
-
High max 7.8SSA-489698 1 CVE
SSA-489698: X_T File Parsing Vulnerability in Parasolid
Parasolid is affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to…
-
High max 7.8
SSA-382651: File Parsing Vulnerability in Solid Edge
Solid Edge is affected by an out of bounds read vulnerability that could be triggered when the application reads files that contains XT parts. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnera…
first Mar 12, 2024 -
High max 8.8
SSA-292063: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.3 and 23.1.0 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before V22.6.3 and 23.1.0. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific …
first Nov 14, 2023 -
High max 7.5SSA-292022 2 CVEs
SSA-292022: Vulnerability in Nozomi Guardian/CMC before 23.4.1 on RUGGEDCOM APE1808 devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC before 23.4.1. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and reco…
-
Critical max 10.0SSA-273900 3 CVEs
SSA-273900: Multiple Vulnerabilities in SIMATIC CN 4100 before V3.0
SIMATIC CN 4100 is vulnerable to use of hard coded credentials including root user and contains an unrestricted USB port that could be misused for insecure boot. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest ver…
-
High max 7.8SSA-258494 1 CVE
SSA-258494: Stack Overflow Vulnerability in Simcenter Nastran before 2406.90
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attack…
-
Critical max 9.8
SSA-240541: WIBU Systems CodeMeter Heap Buffer Overflow Vulnerability in Industrial Products
WIBU Systems published information about a heap buffer overflow vulnerability and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products for license management. The vulnerability is des…
first Sep 12, 2023 -
Critical max 10.0
SSA-225840: Vulnerabilities in the Network Communication Stack in Sinteso EN and Cerberus PRO EN Fire Protection Systems
Several products used in Sinteso EN and Cerberus PRO EN Fire Protection Systems contain buffer overflow vulnerabilities in the network communication stack. Successful exploitation of the vulnerabilities could allow an unauthenticated attacker, who gained acce…
first Mar 12, 2024 -
High max 7.8SSA-046364 3 CVEs
SSA-046364: X_T File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could le…
-
Critical max 9.8SSA-885980 3 CVEs
SSA-885980: Multiple Vulnerabilities in Scalance W1750D
The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to exploit buffer overflow and information disclosure vulnerabilities which could lead to information disclosure or unauthenticated remote code execution. Siemens has re…
-
Critical max 9.8
SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.
first Jun 13, 2023 -
Critical max 9.8
SSA-716164: Multiple Vulnerabilities in Scalance W1750D
The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated …
first Feb 13, 2024 -
High max 8.8SSA-556635 47 CVEs
SSA-556635: Multiple Vulnerabilities in Telecontrol Server Basic before V3.1.2.0
Siemens has released a new version for Telecontrol Server Basic that fixes multiple vulnerabilities.
-
High max 8.4
SSA-457702: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W700 Product Family
The SCALANCE W700 devices are affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information, to steal the victims session or to execute denial-of-service attacks. Siemens recommends count…
first Nov 14, 2023 -
High max 7.8SSA-222019 3 CVEs
SSA-222019: X_T File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an…
-
High max 7.5
SSA-203374: Multiple OpenSSL Vulnerabilities in SCALANCE W1750D Devices
The SCALANCE W1750D device contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, decrypt RSA-encrypted messages or create a denial of service condition. Siemens has released new versions fo…
first Mar 14, 2023 -
High max 7.6SSA-128433 2 CVEs
SSA-128433: Multiple Vulnerabilities in SINEC NMS before V2.0 SP2
SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
-
Critical max 9.8
SSA-943925: Multiple Vulnerabilities in SINEC NMS before V2.0 SP1
SINEC NMS before V2.0 SP1 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version.
first Feb 13, 2024 -
High max 7.5SSA-918992 1 CVE
SSA-918992: Unused HTTP Service on SENTRON 3KC ATC6 Ethernet Module
SENTRON 3KC ATC6 Expansion Module Ethernet exposes an unused, unstable http service at port 80/tcp on the Modbus-TCP Ethernet, which could allow an attacker on the same Modbus network to create a denial of service condition that forces the device to reboot. S…
-
Critical max 9.8
SSA-770721: Multiple Vulnerabilities in SIMATIC RF160B before V2.2
SIMATIC RF160B contain multiple vulnerabilities of different types that could allow an attacker to execute arbitrary code within the context of a privileged process. Siemens has released a new version for SIMATIC RF160B and recommends to update to the latest …
-
Critical max 9.1
SSA-699386: Multiple Vulnerabilities in SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family before V4.5
SCALANCE XB-200/XC-200/XP-200/XF-200BA/XR-300WG Family before V4.5 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Nov 14, 2023 -
High max 7.5
SSA-693975: Denial-of-Service Vulnerability in the Web Server of Industrial Products
A vulnerability in the affected products could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial-of-service attack. Siemens has released a new version for SINAMICS S210 (6SL5...) and recommends to up…
first Dec 12, 2023 -
High max 7.6SSA-653855 1 CVE
SSA-653855: Information Disclosure vulnerability in SINEMA Remote Connect Client before V3.1 SP1
SINEMA Remote Connect Client before V3.1 SP1 is affected by an information disclosure vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Critical max 9.8SSA-576771 2 CVEs
SSA-576771: Multiple Vulnerabilities in SINEMA Remote Connect Server before V3.2
SINEMA Remote Connect Server before V3.2 is affected by multiple vulnerabilities. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium max 5.5SSA-145196 1 CVE
SSA-145196: Authorization Bypass Vulnerability in Siveillance Control
Siveillance Control does not properly check the list of access groups that are assigned to an individual user. This could enable a locally logged on user to gain write privileges for objects where they only have read privileges. Siemens has released a new ver…
-
High max 7.8
SSA-000072: Multiple File Parsing Vulnerabilities in Simcenter Femap
Simcenter Femap contains multiple file parsing vulnerabilities that could be triggered when the application reads files in Catia MODEL file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicati…
first Feb 13, 2024 -
Critical max 9.8
SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4
SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities. Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
-
High max 7.8SSA-797296 2 CVEs
SSA-797296: XT File Parsing Vulnerability in Parasolid
Parasolid is affected by out of bounds read and null pointer dereference vulnerabilities that could be triggered when the application reads files in XT format. If a user is tricked to open a malicious file with the affected applications, an attacker could lev…
-
HighSSA-647068 1 CVE
SSA-647068: Ripple20 in SIMATIC RTLS Gateways
SIMATIC RTLS Gateways are affected by vulnerabilities that were disclosed by JSOF research lab “Ripple20” for the TCP/IP stack. Siemens recommends countermeasures for products where fixes are not, or not yet available.