874 results · Feed
-
High
SSA-539476: Siemens SIMATIC NET CP, SINEMA and SCALANCE Products Affected by Vulnerabilities in Third-Party Component strongSwan
Vulnerabilities in the third-party component strongSwan could allow an attacker to cause a denial of service (DoS) condition in affected devices by exploiting integer overflow bugs. Siemens has released updates for the affected products and recommends to upda…
first Feb 8, 2022 -
Critical max 10.0
SSA-517377: Multiple Vulnerabilities in the SRCS VPN Feature in SIMATIC CP Devices
The below referenced devices contain multiple vulnerabilities that could be exploited when the SINEMA Remote Connect Server (SRCS) VPN feature is used. The feature is not activated by default. The most severe could allow an attacker to execute arbitrary code …
first Jul 12, 2022 -
High max 7.8
SSA-491245: Multiple File Parsing Vulnerabilities in Solid Edge
Solid Edge is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as X_B, DWG, DXF, STL, STP, SLDPRT and PAR format. If a user is tricked to open a malicious…
first Feb 14, 2023 -
High max 8.2
SSA-476715: Two Vulnerabilities in Automation License Manager
Siemens Automation License Manager contains two vulnerabilities which, when combined, could allow an attacker to modify and rename license files, extract licenses and overwrite arbitrary files on the target system potentially leading to privilege escalation a…
first Jan 10, 2023 -
Critical max 9.8
SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.2
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special…
-
High
SSA-324955: SAD DNS Attack in Linux Based Products
A vulnerability made public under the name SAD DNS affects Domain Name System resolvers due to a vulnerability in the Linux kernel when handling ICMP packets. The Siemens products which are affected are listed below. For more information please see https://ww…
first May 11, 2021 -
High max 8.8SSA-320629 2 CVEs
SSA-320629: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.3
RUGGEDCOM CROSSBOW before V5.3 contains two vulnerabilities that could allow authenticated remote attackers to access data they are not authorized for, or execute arbitrary database queries via an SQL injection attack. Siemens has released an update for RUGGE…
-
Medium max 6.6SSA-260625 2 CVEs
SSA-260625: Security Vulnerabilities Fixed in RUGGEDCOM CROSSBOW V5.2
RUGGEDCOM CROSSBOW V5.2 fixes two vulnerabilities that could allow authenticated remote attackers to perform unauthorized actions (CVE-2023-27309) or escalate privileges (CVE-2023-27310). Siemens has released an update for RUGGEDCOM CROSSBOW and recommends to…
-
Critical max 9.8SSA-953464 4 CVEs
SSA-953464: Multiple Vulnerabilites in Siemens Brownfield Connectivity - Client before V2.15
Siemens has released a new version for Brownfield Connectivity - Client that contains fixes for multiple vulnerabilities in the underlying OpenSSL library. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS). Siemens has rel…
-
High max 7.8SSA-836777 3 CVEs
SSA-836777: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Parasolid
JT Open Toolkit, JT Utilities and Parasolid are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application …
-
High max 7.5SSA-744259 8 CVEs
SSA-744259: Golang Vulnerabilities in Brownfield Connectivity - Gateway before V1.10.1
Siemens has released a new version for Brownfield Connectivity - Gateway that contains fixes for multiple vulnerabilities in the underlying Golang implementation. Successful exploitation of these vulnerabilities could lead to Denial of Service (DoS). Siemens …
-
Critical max 10.0SSA-693110 1 CVE
SSA-693110: Buffer Overflow Vulnerability in COMOS
COMOS is affected by memory corruption vulnerability in the cache validation service that could allow an attacker to execute arbitrary code or cause denial of service condition. Siemens has released updates for the affected products and recommends to update t…
-
High max 7.8SSA-658793 1 CVE
SSA-658793: Command Injection Vulnerability in SiPass integrated AC5102 / ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by injecting arbitrary commands that are executed with root privileg…
-
HighSSA-617755 1 CVE
SSA-617755: Denial of Service Vulnerability in the SNMP Agent of SCALANCE X-200IRT Products
Products of the SCALANCE X-200IRT switch family are affected by a denial of service vulnerability in the SNMP agent that could allow remote attackers to cause a denial of service condition. Siemens has released updates for the affected products and recommends…
-
Critical max 9.3
SSA-568428: Weak Key Protection Vulnerability in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a weak key protection vulnerability in the integrated S7-1500 CPU. The weak key protection vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-568427 [1]. Siemens has released…
first Nov 8, 2022 -
High max 7.8SSA-565356 2 CVEs
SSA-565356: X_T File Parsing Vulnerabilities in Simcenter Femap before V2023.1
Simcenter Femap is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulner…
-
Critical
SSA-506569: Multiple Vulnerabilities in SCALANCE W1750D
The SCALANCE W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit buffer overflow vulnerabilities which could lead to denial of service, unauthenticated remote code execution or stored XSS. Siemens has rel…
first Nov 8, 2022 -
High max 7.5
SSA-313313: Denial of Service Vulnerability in the FTP Server of Nucleus RTOS
The FTP server of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to genera…
first Oct 11, 2022 -
Medium max 5.9SSA-252808 1 CVE
SSA-252808: XPath Constraint Vulnerability in Mendix Runtime
Mendix applications contain an improper access control vulnerability that could allow an attacker to bypass XPath constraints and retrieve information using XPath queries that trigger errors. Siemens has released updates for the affected products and recommen…
-
High max 7.8SSA-997779 1 CVE
SSA-997779: File Parsing Vulnerability in Solid Edge before V2023 MP1
Solid Edge is affected by memory corruption vulnerability that could be triggered when the application read files in different file formats such as PAR, ASM, DFT. If a user is tricked to open a malicious file with the affected applications, an attacker could …
-
High max 7.8SSA-936212 3 CVEs
SSA-936212: JT File Parsing Vulnerabilities in JT Open, JT Utilities and Solid Edge
JT Open Toolkit, JT Utilities and Solid Edge are affected by memory corruption vulnerabilities that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause the application…
-
Medium max 5.4
SSA-547714: Argument Injection Vulnerability in SIMATIC WinCC OA Ultralight Client
SIMATIC WinCC OA contains an argument injection vulnerability that could allow an authenticated remote attacker to inject arbitrary parameters, when starting the Ultralight Client via the web interface (e.g., open attacker chosen panels with the attacker's cr…
first Dec 13, 2022 -
Critical max 9.3SSA-496604 1 CVE
SSA-496604: Cross-Site Scripting Vulnerability in Mendix SAML Module
The Mendix SAML module is affected by a reflected cross-site scripting (XSS) vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Apps are only vulnerable in certain cases when non-defa…
-
Medium max 5.3
SSA-431678: Denial of Service Vulnerability in SIMATIC S7 CPU Families
SIMATIC S7 CPU families are affected by a vulnerability that could allow remote attackers to perform a denial of service attack by sending a specially crafted HTTP request to the web server of an affected device. Siemens has released updates for several affec…
first Feb 11, 2020 -
Critical max 9.9SSA-332410 12 CVEs
SSA-332410: Multiple Vulnerabilities in SINEC INS before V1.0 SP2 Update 1
Siemens has released a new version for SINEC INS that fixes multiple vulnerabilities that could allow an attacker to read and write arbitrary files from the file system of the affected component and to ultimately execute arbitrary code on the device. In addit…
-
High max 8.1
SSA-210822: Improper Access Control Vulnerability in Mendix Workflow Commons Module
The Mendix Workflow Commons module improperly handles access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information. Mendix has released updates for several version lines of the Mendix Workflo…
first Dec 13, 2022 -
Medium
SSA-951513: Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, X-200RNA and X-200 Switch Families
Several SCALANCE X switches contain a vulnerability that could allow an attacker to perform administrative actions if the victim is tricked into clicking on a website controlled by the attacker. The attack only works if the victim has an authenticated session…
first Feb 11, 2020 -
High max 9.8SSA-849072 3 CVEs
SSA-849072: Several Vulnerabilities in SICAM PAS before V8.06
SICAM PAS/PQS before V8.06 is affected by three vulnerabilities which could lead to remote code execution, privilege escalation or the creation of a denial of service condition. Siemens has released several updates for SICAM PAS/PQS and recommends to update t…
-
High
SSA-678983: Vulnerabilities in Industrial PCs and CNC devices using Intel CPUs (November 2020)
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens IPC related products, that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel…
first May 11, 2021 -
High max 9.8
SSA-638652: Authentication Bypass Vulnerability in Mendix SAML Module
The Mendix SAML module insufficiently protects from packet capture replay. This could allow unauthorized remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to…
first Sep 13, 2022 -
High max 7.8SSA-588101 5 CVEs
SSA-588101: Multiple File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_B format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerabilit…
-
Medium
SSA-480829: Cross-Site Scripting Vulnerabilities in SCALANCE X Switches
Two cross-site scripting (XSS) vulnerabilities were identified in the web server of several SCALANCE X switches. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jun 12, 2018 -
High
SSA-443566: Authentication Bypass in SCALANCE X Switches Families
Several SCALANCE X switches are affected by an Authentication Bypass vulnerability. The vulnerability allows an unauthenticated attacker to violate access-control rules. The vulnerability can be exploited by sending a GET request to a specific uniform resourc…
first Jan 14, 2020 -
Medium max 6.5SSA-436469 1 CVE
SSA-436469: TCP Vulnerability in APOGEE/TALON Field Panels
A TCP sequence vulnerability in the APOGEE PXC and TALON TC series of products could allow an attacker to execute a denial of service attack by sending specially crafted packets to the device. Siemens has released updates for the affected products and recomme…
-
Critical max 9.8SSA-412672 83 CVEs
SSA-412672: Multiple OpenSSL and OpenSSH Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple OpenSSL and OpenSSH vulnerabilities. The most severe of these vulnerabilities could allow a denial of service condition or could lead to execution of arbitrary code. Siemens has released updates …
-
High max 9.8SSA-363821 6 CVEs
SSA-363821: Multiple Vulnerabilities in SCALANCE X-200RNA Switch Devices before V3.2.7
SCALANCE X-200RNA switch devices before V3.2.7 contain multiple vulnerabilities that could allow an attacker to cause a denial of service condition, to extract sensitive information or to hijack existing sessions. Siemens has released updates for the affected…
-
High max 7.8SSA-360681 3 CVEs
SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple out of bounds write vulnerabilities in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to cras…
-
High max 7.8SSA-333517 4 CVEs
SSA-333517: Multiple Vulnerabilities in SCALANCE SC-600 Family before V3.0
Multiple vulnerabilities affecting various third-party components of the SCALANCE SC-600 family could allow an attacker to cause a denial of service condition, corrupt memory or potentially execute custom code. Siemens has released updates for the affected pr…
-
High
SSA-312271: Unquoted Search Path Vulnerability in Windows-based Industrial Software Applications
Several industrial products as listed below contain a local privilege escalation vulnerability that could allow a local attacker to execute arbitrary code with SYTEM privileges. Siemens has released updates for the affected products and recommends to update t…
first Jun 9, 2020 -
Critical
SSA-274900: Use of Hardcoded Key in SCALANCE X Devices Under Certain Conditions
SCALANCE X devices might not generate a unique random key after factory reset, and use a private key shipped with the firmware. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Jan 12, 2021