874 results · Feed
-
Medium max 6.1SSA-274282 1 CVE
SSA-274282: Cross Site Scripting Vulnerability in PLM Help Server V4.2
The Siemens PLM Help Server V4.2 for documentation contains a reflected cross-site scripting vulnerability. This product has reached end of life, and security vulnerabilities are no longer patched. Siemens has released a new version of Documentation Server t…
-
High max 8.1SSA-224632 1 CVE
SSA-224632: Improper Access Control Vulnerability in Mendix Email Connector Module
The Mendix Email Connector module improperly handles access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information. Mendix has released an update for the Mendix Email Connector module and…
-
High max 7.8SSA-853037 2 CVEs
SSA-853037: File Parsing Vulnerabilities in Parasolid
Parasolid is affected by out of bounds read/write vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerabilit…
-
Critical
SSA-501891: Cross-Site Scripting Vulnerability in SCALANCE X-200 and X-200IRT Families
There is a cross-site scripting vulnerability that affects the SCALANCE switches. This vulnerability if used by a threat actor could result in the stealing of session cookies and session hijacking. Siemens has released updates for the affected products and re…
first Oct 11, 2022 -
Critical
SSA-400332: Insufficient Design IP Protection in IEEE 1735 Recommended Practice - Impact to Questa and ModelSim
A security research [1] identified weaknesses in the IEEE 1735 recommended practice for encryption of Design IP, which could allow a sophisticated attacker access to unencrypted Design IP data in IEEE 1735-compliant products. This advisory addresses the speci…
first Dec 14, 2021 -
Medium max 6.6SSA-371761 1 CVE
SSA-371761: Arbitrary Code Execution Vulnerability in the Logback Component of SINEC NMS before V1.0.3
SINEC NMS versions before V1.0.3 are affected by a vulnerability in the logback component (CVE-2021-42550) that could allow attackers with write access to the logback configuration file to execute arbitrary code on the system. Siemens has released an update f…
-
Medium max 6.5
SSA-362164: Predictable Initial Sequence Numbers in the TCP/IP Stack of Nucleus RTOS
The networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) use Initial Sequence Numbers for TCP-Sessions that are predictable. Siemens has released updates for several affected products and recommends to update to the latest versions.…
first Feb 9, 2021 -
Critical max 9.8SSA-640732 1 CVE
SSA-640732: Authentication Bypass Vulnerability in Siveillance Video Mobile Server
The mobile server component of Siveillance Video 2022 R2 contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to access the application without a valid account. Siemens has released a hotfix for Siveillance Video…
-
MediumSSA-928782 1 CVE
SSA-928782: Firmware Authenticity Vulnerability in LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains a vulnerability that could allow an attacker to install manipulated firmware packages. Siemens has released an update for the LOGO! 8 BM (incl. SIPLUS variants) and recommends to update to the latest version.
-
Critical
SSA-917476: Multiple Vulnerabilities in SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to execute code on the affected device(s), read arbitrary files, or create a denial-of-service condition. Siemens has released updates for the affected products and reco…
first Nov 9, 2021 -
CriticalSSA-836027 1 CVE
SSA-836027: Client-side Authentication in Desigo CC and Cerberus DMS
Desigo CC and Cerberus DMS are based on SIMATIC WinCC OA and implement client-side only authentication for specific parts of their client-server communication. In this configuration, attackers could impersonate other users or exploit the client-server protoco…
-
Critical max 9.0
SSA-685781: Multiple Vulnerabilities in Apache HTTP Server Affecting Siemens Products
Multiple vulnerabilities were identified in the Apache HTTP Server software. These include NULL Pointer Dereferencing, Out-of-bounds Write and Server-Side Request Forgery related vulnerabilities. Siemens has released updates for several affected products and …
first Jun 14, 2022 -
HighSSA-649853 1 CVE
SSA-649853: Improper Certificate Validation Vulnerability in Industrial Edge Management
Industrial Edge Management contains a vulnerability that could allow an unauthenticated attacker to spoof a trusted entity by interfering in the communication path between the Industrial Edge Management (IEM) and the Industrial Edge Hub (IEH) using a crafted …
-
High max 7.8SSA-611756 1 CVE
SSA-611756: JT File Parsing Vulnerability in JTTK and Simcenter Femap
JT Open Toolkit (JTTK) and Simcenter Femap are affected by an uninitialized pointer reference vulnerability that could be triggered while parsing JT files. If a user is tricked to open a malicious JT file with any of the affected products, this could cause th…
-
High max 7.5SSA-384224 1 CVE
SSA-384224: Denial of Service Vulnerability in SIMATIC HMI Panels
Several SIMATIC HMI Panels are affected by a vulnerability that could allow an attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets. Siemens has released updates for the affected produc…
-
HighSSA-360783 7 CVEs
SSA-360783: Multiple Webserver Vulnerabilities in Desigo PXM Devices
Desigo PXM devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially access sensitive information, execute arbitrary commands, cause a denial of service condition, or perform remote code execution. Sieme…
-
Critical
SSA-280624: Multiple Vulnerabilities in SCALANCE W1750D
The Scalance W1750D device contains multiple vulnerabilities that could allow an attacker to inject commands or exploit multiple buffer overflow vulnerabilities that could lead to denial of service or unauthenticated remote code execution. Siemens has release…
first Oct 12, 2021 -
HighSSA-258115 1 CVE
SSA-258115: DWG File Parsing Vulnerability in Solid Edge before SE2022MP9
Solid Edge is affected by a heap overflow vulnerability that could be triggered when the application reads DWG files. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability to perform remote c…
-
Critical max 9.8
SSA-254054: Spring Framework Vulnerability (Spring4Shell or SpringShell, CVE-2022-22965) - Impact to Siemens Products
A vulnerability in Spring Framework was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2022-22965 and is also known as "Spring4Shell" or "SpringShell". Siemens has releas…
first Apr 19, 2022 -
Critical max 9.3SSA-568427 1 CVE
SSA-568427: Weak Key Protection Vulnerability in SIMATIC S7-1200 and S7-1500 CPU Families
SIMATIC S7-1200, S7-1500 CPUs and related products protect the built-in global private key in a way that cannot be considered sufficient any longer. The key is used for the legacy protection of confidential configuration data and the legacy PG/PC and HMI comm…
-
High max 8.8SSA-637483 14 CVEs
SSA-637483 Third-Party Component Vulnerabilities in SINEC INS before V1.0 SP2
Multiple vulnerabilities affecting various third-party components of SINEC INS before V1.0 SP2 could allow an attacker to cause a denial of service condition, disclose sensitive data or violate the system integrity. Siemens has released an update for the SINE…
-
HighSSA-589975 1 CVE
SSA-589975 Improper Access Control Vulnerability in CoreShield OWG Software
The default installation of the Windows version of the CoreShield One- Way Gateway (OWG) software sets insecure file permissions that could allow a local attacker to escalate privileges to local administrator. Siemens Mobility has released an update for the C…
-
High max 7.8SSA-518824 20 CVEs
SSA-518824 Multiple File Parsing Vulnerabilities in Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in X_T file formats. If a user is tricked to open a malicious file with the affected applications, an attacker could l…
-
High
SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization
JT2Go and Teamcenter Visualization are affected by multiple file parsing vulnerabilities in Drawings SDK from Open Design Alliance. If a user is tricked to open a malicious DWG file with any of the affected products, this could lead the application to crash o…
first Jul 12, 2022 -
High
SSA-243317 File Parsing Vulnerability in Simcenter Femap and Parasolid
Simcenter Femap and Parasolid are affected by an out of bounds read vulnerability that could be triggered when the application reads files in NEU format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage …
first Jul 12, 2022 -
Medium
SSA-179516 OpenSSL Vulnerability in Industrial Products
Several Siemens industrial products are affected by a vulnerability in OpenSSL, that could result in data being sent out unencrypted by the SSL/TLS record layer. Siemens has released updates for the affected products and recommends to update to the latest ver…
first Aug 7, 2018 -
Medium
SSA-914168: Multiple Vulnerabilities in SIMATIC WinCC Affecting Other SIMATIC Software Products
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow attackers to retrieve and brute force password hashes and access other systems. Siemens has released updates for several affected products and recommends to update to the latest …
first Feb 8, 2022 -
Medium
SSA-841348: Multiple Vulnerabilities in the UMC Component
The products listed below contain two security vulnerabilities in the UMC component that could allow an attacker to cause a partial denial- of-service of the UMC component, or to locally escalate privileges from a user with administrative privileges to execut…
first Jul 14, 2020 -
High max 7.8
SSA-829738: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by an out of bounds write vulnerability in APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potenti…
first Jul 12, 2022 -
High
SSA-789162: Vulnerabilities in Teamcenter
Teamcenter is affected by XML External Entity Injection (XXE, CVE-2022-29801) and a stack based buffer overflow vulnerability (CVE-2022-24290). XXE impacts only Teamcenter versions before V13.1. Siemens has released updates for the affected products and recom…
first May 10, 2022 -
High max 6.8SSA-759952 2 CVEs
SSA-759952: Command Injection and Denial of Service Vulnerability in Teamcenter
Teamcenter is affected by two security vulnerabilities in the File Service Cache service that could lead to command injection and denial of service issues. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
High max 3.7
SSA-732250: Libcurl Vulnerabilities in Industrial Devices
Vulnerabilities in third-party component cURL could allow an attacker to interfere with the affected products in various ways. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens recommends count…
first May 10, 2022 -
Critical
SSA-669737: Improper Access Control Vulnerability in SICAM TOOLBOX II
SICAM TOOLBOX II contains a vulnerability that could allow an attacker access through a circumventable access control. Siemens recommends countermeasures for products where updates are not, or not yet available.
first Feb 8, 2022 -
Critical max 10.0
SSA-661247: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to Siemens Products
On 2021-12-09, a vulnerability in Apache Log4j (a logging tool used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and is …
first Dec 13, 2021 -
High
SSA-661034: Incorrect Permission Assignment in Multiple SIMATIC Software Products
Multiple SIMATIC software products are affected by a vulnerability that could allow an attacker to change the content of certain metafiles and subsequently manipulate parameters or behaviour of devices configured by the affected software products. Siemens has…
first Jul 13, 2021 -
High
SSA-629512: Local Privilege Escalation Vulnerability in TIA Portal
The latest updates for TIA Portal fix a vulnerability that could allow a local attacker to execute arbitrary code with SYSTEM privileges. Update: The previously provided fixes only correctly set the permissions on English Windows versions. Siemens has release…
first Jan 14, 2020 -
High
SSA-580693: WIBU Systems CodeMeter Runtime Denial-of-Service Vulnerability in Siemens Products
WIBU Systems published information about a denial-of-service vulnerability and an associated fix release version of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerability is describ…
first Nov 9, 2021 -
Critical
SSA-580125: Multiple Vulnerabilities in SIMATIC eaSie
SIMATIC eaSie contains multiple vulnerabilities that could allow an attacker to send arbitrary messages to the underlying message passing framework of the affected system or crash the attached application. Siemens has released an update for the SIMATIC eaSie …
first Jul 12, 2022 -
Medium max 7.5
SSA-492828: Denial-of-Service Vulnerability in SIMATIC S7-300 CPUs and SINUMERIK Controller
A vulnerability in S7-300 might allow an attacker to cause a Denial- of-Service condition on port 102 of the affected devices by sending specially crafted packets. Siemens recommends specific countermeasures for products where updates are not, or not yet avai…
first Nov 10, 2020 -
High max 7.5
SSA-307392: Denial of Service in OPC UA in Industrial Products
A vulnerability has been identified in the OPC UA server of several industrial products. The vulnerability could cause a denial of service condition on the service or the device. Siemens has released updates for several affected products and recommends to upd…
first Apr 9, 2019