874 results · Feed
-
Critical max 9.1SSA-602936 8 CVEs
SSA-602936: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.1
SCALANCE SC-600 Family before V3.1 is affected by multiple vulnerabilities. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends countermeasures for products where fixes are not, o…
-
Critical max 9.8SSA-580228 1 CVE
SSA-580228: Use of Hard-Coded Credentials Vulnerability in Location Intelligence before V4.3
Location Intelligence before V4.3 is affected by a Use of Hard-coded Credentials vulnerability that could allow an attacker to obtain full administrative access to the application. Siemens has released new versions for the affected products and recommends to …
-
High max 7.8SSA-543502 1 CVE
SSA-543502: Local Privilege Escalation Vulnerability in Unicam FX
Unicam FX contains a local privilege escalation vulnerability that could allow an attcker to gain SYSTEM privileges. Unicam FX has reached end of software maintanence. Further information on recommendations for successor product can be found in section 'Addit…
-
High max 7.5SSA-516818 1 CVE
SSA-516818: TCP Sequence Number Validation Vulnerability in the TCP/IP Stack of CP343-1 Devices
Affected products incorrectly validate TCP sequence numbers. This could allow an unauthenticated remote attacker to create a denial of service condition by injecting spoofed TCP RST packets. Siemens recommends countermeasures for products where fixes are not,…
-
High max 7.8
SSA-309571: IPU 2021.1 Vulnerabilities in Siemens Industrial Products using Intel CPUs (June 2021)
Intel has published information on vulnerabilities in Intel products in June 2021. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update. In this advisory we…
first Aug 10, 2021 -
High max 7.5SSA-108696 5 CVEs
SSA-108696: Multiple Vulnerabilities in SIDIS Prime before V4.0.400
SIDIS Prime before V4.0.400 is affected by multiple vulnerabilities in the components OPC UA and OpenSSL, that could allow an unauthenticated attacker with access to the network where SIDIS Prime is installed to reuse OPC UA client credentials, create a denia…
-
High max 7.8SSA-017796 10 CVEs
SSA-017796: Multiple File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL, PSOBJ or SPP file formats. If a user is tricked to open a malicious file with any of the affected products, thi…
-
High max 7.5
SSA-844761: Multiple Vulnerabilities in SiNVR/SiVMS Video Server
The Video Server application in SiNVR/SiVMS solutions contains five vulnerabilities involving information disclosure (CVE-2019-19291, CVE-2019-19299), path traversal (CVE-2019-19296, CVE-2019-19297), and denial-of-service (CVE-2019-19298). PKE has released up…
first Mar 10, 2020 -
High max 7.8SSA-794653 4 CVEs
SSA-794653: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could l…
-
High max 7.8SSA-786191 1 CVE
SSA-786191: Local Privilege Escalation Vulnerability in Spectrum Power 7
Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code and gain root access. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest version.
-
Critical max 9.8SSA-777015 3 CVEs
SSA-777015: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.7
SIMATIC CN 4100 is vulnerable to authorization bypass through user-controlled key, use of default credentials and unauthenticated IP address change that could allow an attacker to remotely login as root or cause denial of service condition of the device. Siem…
-
Medium max 5.9
SSA-772220: OpenSSL Vulnerabilities in Industrial Products
OpenSSL has published a security advisory [0] about a vulnerability in OpenSSL versions 1.1.1 < 1.1.1k, that allows an unauthenticated attacker to cause a Denial-of-Service (DoS) if a maliciously crafted renegotiation message is sent. Siemens has released new…
first Jul 13, 2021 -
Critical max 9.9
SSA-761844: Multiple Vulnerabilities in Control Center Server (CCS)
The advisory informs about multiple vulnerabilities in the Central Control Server (CCS) application, as initially reported in SSA-761617 ( https://cert-portal.siemens.com/productcert/html/ssa-761617.html) on 2019-12-10 and SSA-844761 (https://cert-portal.siem…
first Apr 13, 2021 -
Critical max 9.8
SSA-761617: Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server
The Video Server application in SiNVR/SiVMS solutions contains two vulnerabilities involving authentication bypass (CVE-2019-18339) and information disclosure (CVE-2019-18340). PKE has released an update of the application that fixes CVE-2019-18339. This upda…
first Dec 10, 2019 -
Critical max 10.0SSA-702935 1 CVE
SSA-702935: Redfish Server Vulnerability in maxView Storage Manager
MaxView Storage Manager shipped with affected SIMATIC IPCs contains a Redfish Server Vulnerability that could provide unauthorized access. Microchip has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.8SSA-589891 11 CVEs
SSA-589891: Multiple PAR File Parsing Vulnerabilities in Solid Edge
Siemens Solid Edge 2023 has released Update 10, that fixes multiple vulnerabilities that could be triggered when the application reads PAR files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and pot…
-
Medium max 6.6SSA-583634 1 CVE
SSA-583634: Command Injection Vulnerability in the CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a command injection vulnerability that could allow an authenticated remote attacker to inject commands that are executed on the device with root privileges during device startup. Siemens ha…
-
Critical max 9.9
SSA-570294: Multiple Vulnerabilities in SICAM Q100 Before V2.50
SICAM Q100 devices contain multiple vulnerabilities that could allow an attacker to take over the session of a logged in user or to inject custom code. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Nov 8, 2022 -
Medium max 5.5
SSA-480095: Vulnerabilities in the Web Interface of SICAM Q100 Devices before V2.60
The web server of SICAM Q100 devices, versions before V2.60, contains a Cross Site Request Forgery (CSRF) vulnerability and is missing cookie protection flags. This could allow an attacker to perform arbitrary actions on the device on behalf of a legitimate u…
first Dec 12, 2023 -
High max 8.4
SSA-983300: Vulnerabilities in LOGO! Soft Comfort
Two vulnerabilities have been identified in the LOGO! Soft Comfort software. These could allow an attacker to take over a system with the affected software installed. Siemens has released an update for LOGO! Soft Comfort and recommends to update to the latest…
first Apr 13, 2021 -
High max 7.5SSA-892915 2 CVEs
SSA-892915: Multiple Denial of Service Vulnerabilities in the Webserver of Industrial Products
Multiple vulnerabilities in the affected products could allow an unauthorized attacker with network access to the webserver to perform a denial of service attack. Siemens has released a new version for SINAMICS S120 (incl. SIPLUS variants) and recommends to u…
-
Medium max 4.2SSA-887801 1 CVE
SSA-887801: Information Disclosure Vulnerability in SIMATIC STEP 7 (TIA Portal)
Siemens has released a new version of STEP 7 (TIA Portal) that fixes an information disclosure vulnerability. A local attacker could gain access to the access level password of the SIMATIC S7-1200 and S7-1500 CPUs, when entered by a legitimate user in the har…
-
High
SSA-618620: Vulnerabilities in Boot Loader (U-Boot) of RUGGEDCOM ROS Devices
The boot loader within RUGGEDCOM ROS contains two vulnerabilities in the loading process of the operating system kernel. The more severe of these vulnerabilities could allow an attacker with local access to the device to execute arbitrary code on an affected …
first Dec 10, 2019 -
High max 7.5SSA-118850 1 CVE
SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a denial of service vulnerability in the OPC UA implementation of the integrated S7-1500 CPU. The vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-711309 [1]. Siemens has r…
-
High max 8.1SSA-077170 7 CVEs
SSA-077170: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 2
SINEC INS before V1.0 SP2 Update 2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC INS and recommends to update to the latest version.
-
High max 7.8
SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge
Solid Edge is affected by a file parsing vulnerability in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with the affected application, an attacker could leverage the vulnerability to crash the application or execute…
first Jun 13, 2023 -
High max 7.8SSA-887122 2 CVEs
SSA-887122: X_T File Parsing Vulnerabilities in Simcenter Femap
Simcenter Femap is affected by out of bounds write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerabili…
-
CriticalSSA-617233 9 CVEs
SSA-617233: Urgent/11 TCP/IP Stack Vulnerabilities in SIPROTEC 4 7SJ66 Devices
SIPROTEC 4 7SJ66 devices are affected by multiple security vulnerabilities due to the underlying Wind River VxWorks network stack. This stack is affected by nine of the eleven vulnerabilities that are also known as "URGENT/11". The vulnerabilities could allow…
-
High max 7.8SSA-478780 7 CVEs
SSA-478780: Multiple WRL File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the app…
-
High max 8.0SSA-456933 4 CVEs
SSA-456933: Multiple Vulnerabilities in SIMATIC PCS neo before V4.1
SIMATIC PCS neo before V4.1 is affected by multiple vulnerabilities. Siemens has released a new version for SIMATIC PCS neo and recommends to update to the latest version.
-
High max 7.8
SSA-363107: An Improper Initialization Vulnerability Affects SIMATIC WinCC Kiosk Mode
A vulnerability was found in SIMATIC WinCC that could allow authenticated attackers to escape the Kiosk Mode. Siemens has released updates for the affected products and recommends to update to the latest versions.
first May 10, 2022 -
High max 8.8
SSA-268517: Code Execution Vulnerability (libwebp CVE-2023-4863) in Mendix Studio Pro
Mendix Studio Pro is vulnerable to an out of bounds write vulnerability in the integrated libwebp library (CVE-2023-4863), that could allow an attacker to execute code in the context of a victim user's system. Siemens has released updates for the affected pro…
-
High max 7.5SSA-197270 1 CVE
SSA-197270: Information Disclosure Vulnerability in Siemens OPC UA Modeling Editor (SiOME)
Siemens OPC UA Modeling Editor (SiOME) is affected by an XML external entity (XXE) injection vulnerability that could allow an attacker to interfere with an application's processing of XML data and read arbitrary files in the system. Siemens has released a ne…
-
Critical max 9.8SSA-150063 13 CVEs
SSA-150063: Multiple Vulnerabilities in SINEC PNI before V2.0
SINEC PNI before V2.0 is affected by multiple vulnerabilities. Siemens has released an update for SINEC PNI and recommends to update to the latest version.
-
Critical max 9.8SSA-137900 16 CVEs
SSA-137900: Multiple Vulnerabilities in COMOS
COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released an update for COMOS and recommends to updat…
-
Critical max 9.8SSA-099606 8 CVEs
SSA-099606: Multiple Vulnerabilities in SIMATIC MV500 before V3.3.5
SIMATIC MV500 before V3.3.5 is affected by multiple vulnerabilities. Siemens has released an update for SIMATIC MV500 and recommends to update to the latest version.
-
Medium max 6.8SSA-084182 1 CVE
SSA-084182: Privilege Escalation Vulnerability in Mendix Runtime
Mendix Runtime contains a capture-replay flaw which could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify o…
-
Critical max 9.8SSA-843070 13 CVEs
SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to sensitive information disclosure, unauthenticated denial of service or unauthenticated …
-
Medium max 6.7SSA-784849 2 CVEs
SSA-784849: Direct Memory Access Vulnerabilities in SIMATIC CP Devices
Several SIMATIC CP devices contain direct memory access vulnerabilities that could allow an attacker to execute code, access the PROFINET network without restrictions or perform denial of service attacks. Siemens recommends specific countermeasures for produc…
-
High max 7.5SSA-770890 1 CVE
SSA-770890: Path Traversal Vulnerability in the Web Server of CPCI85 Firmware of SICAM A8000 Devices
The web server in the CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by a path traversal vulnerability that could allow an authenticated remote attacker to traverse directories on the system, download arbitrary files and potentially escalate p…