874 results · Feed
-
Critical max 9.8
SSA-824231: Unauthenticated Firmware Upload Vulnerability in Desigo PX Controllers
Several Desigo PXC/PXM devices contain a vulnerability that could allow unauthenticated remote attackers to upload malicious firmware without prior authentication. Siemens has released updates for the affected products and recommends to update to the latest v…
first Jan 24, 2018 -
High max 7.2SSA-731916 3 CVEs
SSA-731916: Multiple Vulnerabilities in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by multiple vulnerabilities such as authenticated remote command injection, exposure of serial UART interface, and hard coded credentials (for UART login). Siemens has released updates for the…
-
Critical max 9.9
SSA-572005: Vulnerabilities in the Web Server of SICAM P850 and SICAM P855 Devices
Session fixation and multiple incorrect parameter parsing vulnerabilities that could potentially lead to remote code execution were identified in the web server of SICAM P850 and SICAM P855 devices. Siemens has released updates for the affected products and r…
first Oct 11, 2022 -
High max 7.8SSA-538795 4 CVEs
SSA-538795: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious CGM files. If a user is tricked to open a malicious CGM file with the affected products, this could l…
-
Low max 3.9SSA-508677 1 CVE
SSA-508677: Use of Obsolete Function Vulnerability in SIMATIC WinCC before V8
Before SIMATIC WinCC V8, legacy OPC services (OPC DA (Data Access), OPC HDA (Historical Data Access), and OPC AE (Alarms & Events)) were used per default. These services were designed on top of the Windows ActiveX and DCOM mechanisms and do not implement stat…
-
Medium max 4.6SSA-482956 1 CVE
SSA-482956: Information Disclosure Vulnerability in SIMOTION before V5.5
SIMOTION contains an information disclosure vulnerability that could allow an unauthenticated attacker to extract confidential technology object (TO) configuration from the device. Siemens has released updates for the affected products and recommends to updat…
-
High max 7.8
SSA-120378: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads malicious TIF, CGM or PDF files. If a user is tricked to open a malicious TIF, CGM or PDF file with the affecte…
first Nov 8, 2022 -
Critical max 9.8SSA-892048 9 CVEs
SSA-892048: Third-Party Component Vulnerabilities in SINEC NMS before V1.0.3.1
Multiple vulnerabilities affecting third-party components libexpat and libcurl of SINEC NMS before V1.0.3.1 could allow an attacker to impact SINEC NMS confidentiality, integrity and availability. Siemens has released an update for SINEC NMS and recommends to…
-
Critical max 9.9SSA-789345 2 CVEs
SSA-789345: Code Execution Vulnerabilities in Siveillance Video Event and Management Servers
Both the Event Server and the Management Server components of Siveillance Video deserialize data without sufficient validations. This could allow an authenticated remote attacker to execute code on the affected system. Siemens has released updates for the aff…
-
Medium max 5.9
SSA-632164: External Entity Injection Vulnerability in Polarion ALM
Polarion ALM is vulnerable to XML External Entity (XXE) injection attack that could allow an attacker to potentially disclose confidential data. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
first Apr 11, 2023 -
Medium max 6.5
SSA-592007: Denial of Service Vulnerability in Industrial Products
Several industrial controllers are affected by a security vulnerability that could allow an attacker to cause a denial of service condition via PROFINET DCP network packets under certain circumstances. Precondition for this scenario is a direct OSI Layer 2 ac…
first Mar 20, 2018 -
High max 7.2SSA-555292 7 CVEs
SSA-555292: Security Vulnerabilities Fixed in SIMATIC Cloud Connect 7 V2.1
SIMATIC Cloud Connect 7 contains multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.5
SSA-480230: Denial of Service Vulnerability in Webserver of Industrial Products
A vulnerability in the affected devices could allow an unauthorized attacker with network access to the webserver of an affected device to perform a denial of service attack. Siemens has released updates for several affected products and recommends to update …
first Apr 9, 2019 -
Critical max 9.9SSA-325383 4 CVEs
SSA-325383: Multiple Vulnerabilities in SCALANCE LPE9403 before V2.1
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
-
High max 8.2
SSA-113131: Denial of Service Vulnerabilities in SIMATIC S7-400 CPUs
Two vulnerabilities have been identified in the SIMATIC S7-400 CPU family that could allow an attacker to cause a denial of service condition. In order to exploit the vulnerabilities, an attacker must have access to the affected devices on port 102/tcp via Et…
first Nov 13, 2018 -
High max 7.5
SSA-978220: Denial of Service Vulnerability over SNMP in Multiple Industrial Products
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a denial of service attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released updates for several affected products and rec…
first Feb 11, 2020 -
Critical max 9.9
SSA-840188: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow local or remote attackers to escalate privileges and read, write or delete critical files. Siemens has released updates for several affected products and recommends to update to …
first Nov 9, 2021 -
High max 7.5
SSA-838121: Multiple Denial of Service Vulnerabilities in Industrial Products
Affected SIMATIC firmware contains three vulnerabilities that could allow an unauthenticated attacker to perform a denial of service attack under certain conditions. Siemens has released updates for several affected products and recommends to update to the la…
first Feb 8, 2022 -
Medium max 5.4
SSA-792594: Host Header Injection Vulnerability in Polarion ALM
Polarion ALM contains a misconfiguration in its default Apache HTTP Server configuration that could allow an attacker to perform host header injection attacks. Siemens has released an update for Polarion ALM and recommends to update to the latest version.
first Dec 13, 2022 -
High max 7.8
SSA-700053: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple file parsing vulnerabilities that could be triggered when the application reads a malicious file in CGM or RAS format. If a user is tricked to open a malicious file with the affected products…
first Dec 13, 2022 -
Medium max 5.3SSA-699404 1 CVE
SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module
The Mendix Forgot Password module contains an observable response discrepancy issue that could allow an attacker to retrieve sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 7.5
SSA-676336: OpenSSH Vulnerabilities in SCALANCE X-200 and X-300/X408 Switches
The latest update of the SCALANCE X-200 and X-300/X408 switches families fixes multiple OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition. Siemens has released updates for several affected products and…
first Sep 14, 2021 -
High max 7.8SSA-642810 1 CVE
SSA-642810: JT File Parsing Vulnerability in JT Open and JT Utilities
JT Open Toolkit and JT Utilities are affected by a memory corruption vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application to crash or…
-
High max 5.5SSA-629917 1 CVE
SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by a memory corruption vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potent…
-
Medium
SSA-603476: Web Vulnerabilities in SIMATIC NET CP 343-1/CP 443-1 Modules and SIMATIC S7-300/S7-400 CPUs
SIMATIC CP 343-1 Advanced/CP-443-1 Advanced devices and SIMATIC S7-300/S7-400 CPUs are affected by two vulnerabilities. One of the vulnerabilities could allow remote attackers to perform operations as an authenticated user under certain conditions. Siemens ha…
first Nov 21, 2016 -
HighSSA-572164 1 CVE
SSA-572164: Luxion KeyShot Vulnerability in Solid Edge
The Solid Edge installation package includes a specific version of the third-party product KeyShot from Luxion : https://www.keyshot.com, which may not contain the latest security fixes provided by Luxion. Siemens recommends to update KeyShot according to the…
-
Critical max 9.8SSA-558014 10 CVEs
SSA-558014: Third-Party Component Vulnerabilities in SCALANCE XCM332 before V2.2
Multiple vulnerabilities in the third-party components cURL, BusyBox, libtirpc, Expat as well as in the Linux Kernel could allow an attacker to impact the SCALANCE XCM332 device's confidentiality, integrity and availability. Siemens has released an update for…
-
High max 7.5
SSA-557541: Denial-of-Service Vulnerability in SIMATIC S7-400 CPUs
SIMATIC S7-400 CPU devices contain an input validation vulnerability that could allow an attacker to create a Denial-of-Service condition. A restart is needed to restore normal operations. Siemens has released an update for SIMATIC S7-410 V10 CPU family and S…
first Apr 12, 2022 -
High max 7.5
SSA-549234: Denial-of-Service Vulnerability in SIMATIC NET CP Modules
A denial of service vulnerability was identified in different types of Communication Processors. An attacker could exploit this vulnerability causing the device to become un-operational until the device is restarted. Siemens has released updates for several a…
first Sep 14, 2021 -
Medium max 6.2SSA-511182 1 CVE
SSA-511182: Use of Static TLS Certificate Known Hard Coded Private Keys in Adaptec Maxview Application
The Adaptec Maxview application shipped with affected SIMATIC IPCs contains a hard coded, non-unique certificate to secure HTTPS connections between the browser and the local Maxview configuration application. A local attacker may use this key to decrypt inte…
-
Medium max 6.7SSA-479249 1 CVE
SSA-479249: Weak Encryption Vulnerability in SCALANCE X-200IRT Devices
The SSH server on SCALANCE X-200IRT devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the aff…
-
Critical max 9.8SSA-472454 1 CVE
SSA-472454: Command Injection Vulnerability in CPCI85 Firmware of SICAM A8000 Devices
The CPCI85 firmware of SICAM A8000 CP-8031 and CP-8050 is affected by unauthenticated command injection vulnerability. This could allow an attacker to perfom remote code execution. Siemens has released updates for the affected products and recommends to updat…
-
High max 7.5
SSA-462066: Vulnerability known as TCP SACK PANIC in Industrial Products
Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The vulnerability could allow a remote attacker to cause a denial of service condition. Siemens has released updates for several affected products and recommen…
first Sep 10, 2019 -
Medium max 5.3
SSA-459643: Denial of Service Vulnerability in RUGGEDCOM ROS before V5.6.0
RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP conn…
first Sep 13, 2022 -
Critical max 9.6
SSA-310038: Multiple Vulnerabilities in SCALANCE X Switch Devices
Several SCALANCE X switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial-of-service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has released …
first Jul 12, 2022 -
High max 7.5
SSA-270778: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC Software
A Denial-of-Service vulnerability was found in SIMATIC PCS 7, SIMATIC WinCC and SIMATIC NET PC software when encrypted communication is enabled. The vulnerability could allow an attacker with network access to cause a Denial-of-Service condition under certain…
first Feb 11, 2020 -
High max 7.5
SSA-102233: SegmentSmack in VxWorks-based Industrial Devices
The products listed below contain a vulnerability that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet w…
first Apr 14, 2020 -
Critical max 7.5
SSA-941426: Multiple LLDP Vulnerabilities in Industrial Products
There are multiple vulnerabilities in an underlying Link Layer Discovery Protocol (LLDP) third party library. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jul 13, 2021 -
High max 7.8
SSA-847261: Multiple SPP File Parsing Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation has released an update, 2201 Update 6, that fixes multiple vulnerabilities that could be triggered when the application reads SPP files. If a user is tricked to open a malicious file using the affected application, this cou…
first Feb 14, 2023 -
High max 7.5SSA-565386 17 CVEs
SSA-565386: Third-Party Component Vulnerabilities in SCALANCE W-700 IEEE 802.11ax devices before V2.0
Multiple vulnerabilities affecting various third-party components of SCALANCE W-700 IEEE 802.11ax devices before V2.0 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released…