874 results · Feed
-
High max 8.3SSA-594373 1 CVE
SSA-594373: Cross-Site-Scripting (XSS) Vulnerability in SINEMA Server V14
SINEMA Server V14 improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could perform a stored cross-site scripting (XSS) attack that may lead to arbitrary code execution with SYST…
-
High max 7.8SSA-524778 9 CVEs
SSA-524778: File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads SPP and IGS files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and potential…
-
High max 7.5
SSA-516174: Wi-Fi Encryption Bypass Vulnerabilities in SCALANCE W1750D
The SCALANCE W1750D device is affected by Wi-Fi encryption bypass vulnerabilities ("Framing Frames") that could allow an attacker to disclose sensitive information or to steal the victims session. Siemens has released updates for the affected products and rec…
first May 9, 2023 -
Critical max 9.8SSA-386812 1 CVE
SSA-386812: Remote Code Execution Vulnerability in Simcenter Amesim before V2021.1
Simcenter Amesim contains a vulnerable SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in the context of the affected application process. Siemens has released an update for Simcenter Amesi…
-
Medium max 5.3SSA-295483 1 CVE
SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module
The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium
SSA-285795: Denial of Service in OPC-UA in Industrial Products
A vulnerability in the underlying third party component OPC UA ANSIC Stack (also called Legacy C-Stack) affects several industrial products. The vulnerability could cause a crash of the component that includes the vulnerable part of the stack. Siemens has rel…
first May 10, 2022 -
High max 7.3
SSA-250085: Multiple Vulnerabilities in SINEC NMS and SINEMA Server
SINEC NMS and SINEMA Server V14 contain multiple vulnerabilities that could allow an attacker to execute arbitrary code on the system, arbitrary commands on the local database or achieve privilege escalation. Siemens has released several updates for SINEC NMS…
first Mar 8, 2022 -
Critical max 9.8SSA-134651 1 CVE
SSA-134651: Hard Coded SSH ID in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 contains a hard-coded ID in the SSH authorized_keys configuration file. An attacker with knowledge of the corresponding credential could login to the device via SSH. Only devices with activated debug supp…
-
High max 7.8SSA-829656 1 CVE
SSA-829656: Stack Overflow Vulnerability in Xpedition Layout Browser
Siemens Xpedition Layout Browser consists of a stack overflow vulnerability that could be triggered when the application reads a malicious file in PCB format. If a user is tricked to open a malicious file with the affected product, this could lead the applica…
-
Medium max 5.5SSA-646240 1 CVE
SSA-646240: Sensitive Information Disclosure in SIMATIC PCS neo Administration Console
The Administration Console of SIMATIC PCS neo leaks Windows admin credentials. An attacker with local Windows access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems…
-
High max 8.2SSA-357182 1 CVE
SSA-357182: Local Privilege Escalation Vulnerability in Spectrum Power 7
Spectrum Power 7 is affected by a vulnerability that could allow an authenticated local attacker to inject arbitrary code to the update script and escalate privileges. Siemens has released an update for Spectrum Power 7 and recommends to update to the latest …
-
High max 8.2SSA-957369 23 CVEs
SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family
Insyde has published information on vulnerabilities in Insyde BIOS up to August 2023. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest version…
-
High max 7.8
SSA-764801: File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation contains multiple vulnerabilities that could be triggered when the application reads PAR, SPP, STP and PRT files. If a user is tricked to open a malicious file using the affected application, this could lead to a crash, and…
first Jul 11, 2023 -
High max 7.6
SSA-587547: Unencrypted Storage of User Credentials in QMS Automotive
QMS Automotive contains a vulnerability that stores user credentials in plantext within the user database. This could allow an attacker to read credentials from memory. Siemens has released an update for QMS Automotive and recommends to update to the latest v…
first Nov 8, 2022 -
Medium max 6.5
SSA-478960: Missing CSRF Protection in the Web Server Login Page of Industrial Controllers
The web server login page of affected products does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.. Siemens has released updates for sever…
first Nov 8, 2022 -
High max 7.0
SSA-450613: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family
Insyde has published information on vulnerabilities in Insyde BIOS on November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest vers…
first Feb 14, 2023 -
High max 7.5
SSA-382653: Multiple Denial of Service Vulnerabilities in Industrial Products
Affected SIMATIC firmware contains multiple vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for the affected products and recommends to update to the lat…
first Dec 13, 2022 -
High max 7.8SSA-278349 7 CVEs
SSA-278349: Multiple WRL File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens JT2Go and Teamcenter Visualization are affected by file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead th…
-
High max 7.8SSA-190839 2 CVEs
SSA-190839: X_T File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to …
-
High max 8.8SSA-147266 10 CVEs
SSA-147266: Multiple Vulnerabilities in QMS Automotive before V12.39
QMS Automotive before V12.39 contains multiple vulnerabilities that could allow an attacker to perform malicious code injection, information disclosure or lead to a denial of service condition. Siemens has released an update for QMS Automotive and recommends …
-
High max 7.8SSA-975961 2 CVEs
SSA-975961: Privilege Escalation Vulnerabilities in SICAM TOOLBOX II before V07.10
SICAM TOOLBOX II contains two vulnerabilities that could allow local attackers to execute code on the system with elevated privileges. Siemens has released an update for SICAM TOOLBOX II and recommends to update to the latest version.
-
High max 7.8
SSA-932528: Multiple File Parsing Vulnerabilities in Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DWG, IFC, OBJ or STP format. If a user is tricked to open a malicious file with the affe…
first May 9, 2023 -
Critical max 9.1
SSA-851884: Authentication Bypass Vulnerability in Mendix SAML Module
The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to upd…
first Mar 14, 2023 -
High max 7.8SSA-811403 9 CVEs
SSA-811403: Multiple File Parsing Vulnerabilities in Solid Edge before V223 Update 7
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as DFT, PAR or PSM format. If a user is tricked to open a malicious file with the affected …
-
Critical max 9.8SSA-472630 5 CVEs
SSA-472630: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.4
The RUGGEDCOM CROSSBOW server application before V5.4 contains multiple vulnerabilities that could allow an attacker to execute arbitrary database queries via SQL injection attacks, to create a denial of service condition, or to write arbitrary files to the a…
-
High
SSA-223771: SISCO Stack Vulnerability in SIPROTEC 5 Devices
A vulnerability in the third party component SISCO MMS-EASE could allow attackers to cause a denial of service condition with SIPROTEC 5 devices. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Dec 13, 2022 -
High max 7.8SSA-188491 2 CVEs
SSA-188491: DLL Hijacking Vulnerabilities in Siemens Software Center
Multiple DLL Hijacking vulnerabilities in Siemens Software Center (SSC) could allow a local attacker to execute code with elevated privileges. Siemens has released an update for the Siemens Software Center and recommends to update to the latest version.
-
High max 8.8
SSA-180579: Privilege Management Vulnerability and Multiple Nucleus RTOS Vulnerabilities in APOGEE/TALON Field Panels before V3.5.5/V2.8.20
APOGEE PXC / TALON TC field panels (BACnet before V3.5.5 and P2 Ethernet before V2.8.20) contain multiple vulnerabilities: - CVE-2022-45937: A privilege management vulnerability that could allow low privilege authenticated attackers to gain high privilege acc…
first Dec 13, 2022 -
High max 7.8SSA-131450 3 CVEs
SSA-131450: File parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization
Siemens JT2Go, Teamcenter Visualization and Solid Edge are affected by multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as ASM or TIFF file format) with any of the affected products, this could lead the application…
-
HighSSA-116172 1 CVE
SSA-116172: Nullsoft Scriptable Install System (NSIS) Vulnerability (CVE-2023-37378) in Parasolid Installer
A vulnerability in Nullsoft Scriptable Installer System (NSIS) software (CVE-2023-37378) used in Parasolid installers before V36 creates an “uninstall directory” with insufficient access control. This could allow an attacker to misuse the vulnerability, and p…
-
High max 7.8SSA-001569 2 CVEs
SSA-001569: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application …
-
High max 7.8
SSA-930100: Privilege Escalation Vulnerability in Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released an update for Simcen…
first Dec 13, 2022 -
High max 7.5SSA-924149 1 CVE
SSA-924149: Stack Overflow Vulnerability in SiPass Integrated before V2.90.3.8
SiPass integrated versions before V2.90.3.8 contain a stack overflow vulnerability that could allow an unauthenticated remote attacker to crash the server application, creating a denial of service condition. Siemens has released an update for SiPass integrate…
-
Critical max 9.8SSA-561322 13 CVEs
SSA-561322: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3.4
SIMATIC MV500 devices before V3.3.4 are affected by multiple vulnerabilities in the web server and several third-party components. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Critical max 9.9SSA-313488 2 CVEs
SSA-313488: Multiple Vulnerabilities in SIMATIC CN 4100 before V2.5
SIMATIC CN 4100 is vulnerable to improper access control and insecure default configurations that could allow an attacker to gain privilege escalation, and bypass network isolation. Siemens has released an update for SIMATIC CN 4100 and recommends to update t…
-
Critical max 9.8SSA-146325 21 CVEs
SSA-146325: Multiple Vulnerabilities in RUGGEDCOM ROX before V2.16
Devices based on RUGGEDCOM ROX before V2.16 contain multiple high severity vulnerabilities, including the third-party vulnerabilities: CVE-2022-24903, CVE-2022-2068, CVE-2021-22946, CVE-2022-22576, CVE-2022-27781, CVE-2022-27782, CVE-2022-32207, CVE-2022-1292…
-
Critical max 9.8
SSA-942865: Multiple Vulnerabilities in the Integrated SCALANCE S615 of SINAMICS Medium Voltage Products
SINAMICS PERFECT HARMONY GH180 is affected by multiple vulnerabilities in the integrated SCALANCE S615 device, as documented in SSA-419740 ( https://cert-portal.siemens.com/productcert/html/ssa-419740.html). Siemens recommends to update the firmware of the in…
first Jun 13, 2023 -
High max 7.8
SSA-988345: Local Privilege Escalation Vulnerability in Xpedition Designer
A vulnerability in Xpedition Designer could allow an attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released updates for the affected products and recommends to update …
first Jun 14, 2022 -
High max 7.8SSA-914026 1 CVE
SSA-914026: Local Code Execution Vulnerability in SIMATIC WinCC V7
SIMATIC WinCC V7 is affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges, if a non-default installation path was chosen during installation. Siemens has released an update for SIMATIC WinCC and recomme…
-
Critical max 9.9SSA-887249 6 CVEs
SSA-887249: Multiple Vulnerabilities in the Web Interface of SICAM Q200 Devices
Multiple vulnerabilities were identified in the webserver of Q200 devices. These include Cross Site Request Forgery (CSRF), session fixation, missing secure flags in HTTP cookies and memory corruption issues due to missing input validation that could lead to …