874 results · Feed
-
Medium
SSA-232418: Vulnerabilities in SIMATIC S7-1200 and SIMATIC S7-1500 CPU Families
Two vulnerabilities have been identified in the SIMATIC S7-1200/S7-1500 CPU families and related products. One vulnerability (CVE-2019-10943) could allow an attacker with network access to affected devices to modify the user program stored on these devices su…
first Aug 13, 2019 -
Critical
SSA-220589: Hard Coded Default Credential Vulnerability in Teamcenter
Siemens has released updates for Teamcenter that fixes a security vulnerability related to unsecure storage of user credentials. This vulnerability affects Java EE Server Manager HTML Adaptor. This service is not installed by default and currently also obsole…
first Jun 14, 2022 -
Medium max 5.3SSA-185638 1 CVE
SSA-185638: Authentication Bypass Vulnerability in SICAM A8000 Web Server Module
A vulnerability was identified in the web server module used in the SICAM A8000 CP-8000, CP-8021 and CP-8022 devices' protocol firmwares. - AGPMT0 (AGP Master) - DNPiT1 (DNP3 TCP/IP Server) - DNPiT2 (DNP3 TCP/IP Client) - DNPMT0 (DNP3 Master seriell) - DNPST0…
-
CriticalSSA-944952 1 CVE
SSA-944952: Authentication Bypass Vulnerability in Opcenter Quality
Siemens has released updates for Opcenter Quality to fix an authentication bypass vulnerability. This could allow unauthenticated access to the application or cause denial of service condition for existing users. The issue is based on rich client modules usin…
-
CriticalSSA-910883 1 CVE
SSA-910883: DHCP Client Vulnerability in SINAMICS PERFECT HARMONY GH180 Drives
Several models of SINAMICS PERFECT HARMONY GH180 Drives are affected by a DHCP client vulnerability (CVE-2021-29998) in the integrated SCALANCE X206-1 device. The vulnerability could allow an attacker to cause a heap-based buffer overflow on that device and u…
-
HighSSA-865333 1 CVE
SSA-865333: Memory Corruption Vulnerability in EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30938). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…
-
High
SSA-711829: Denial of Service Vulnerability in TIA Administrator
In conjunction with the installation of the affected products listed in the table below, a vulnerability in TIA Administrator occurs that could allow an unauthenticated attacker to perform a denial of service attack. Siemens has released updates for the affec…
first Apr 12, 2022 -
MediumSSA-610768 1 CVE
SSA-610768: XML Entity Expansion Injection Vulnerability in Mendix Excel Importer Module
The latest update of Mendix Excel Importer module fixes an XML Entity Expansion Injection vulnerability. Mendix has released an update for the Mendix Excel Importer module and recommends to update to the latest version.
-
HighSSA-599506 1 CVE
SSA-599506: Command Injection Vulnerability in RUGGEDCOM ROX
RUGGEDCOM ROX devices are affected by a command injection vulnerability that could allow an attacker with administrative privileges to gain root access. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Medium
SSA-557804: Mirror Port Isolation Vulnerability in SCALANCE X Switches
A vulnerability was identified in several SCALANCE X switches that could allow an attacker to feed information into a network via the mirror port with the monitor barrier feature enabled. Siemens has released updates for the affected products and recommends t…
first Mar 12, 2019 -
MediumSSA-492173 1 CVE
SSA-492173: Expression Injection Vulnerability in Mendix Applications
An expression injection vulnerability was discovered in the Workflow processing of Mendix Runtime, that can affect the running applications. The vulnerability could allow a malicious user to leak sensitive information if the Workflow visual language of Mendix…
-
HighSSA-491621 1 CVE
SSA-491621: Denial of Service Vulnerability in CPC80 Firmware of SICAM A8000 Devices
A vulnerability was identified in the CPC80 firmware of SICAM A8000 devices. It could allow an unauthenticated remote attacker to cause a permanent denial of service condition. Siemens has released updates for the affected products and recommends to update to…
-
HighSSA-474231 1 CVE
SSA-474231: File Parsing Vulnerability in Simcenter Femap before V2022.2
Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected application, an attack…
-
HighSSA-439148 20 CVEs
SSA-439148: File Parsing Vulnerabilities in PADS Standard/Plus Viewer
Siemens PADS Standard/Plus Viewer is affected by multiple memory corruption vulnerabilities that could be triggered when the application reads files in PCB format. If a user is tricked to open a malicious file with the affected application, an attacker could …
-
MediumSSA-433782 1 CVE
SSA-433782: Improper Access Control Vulnerability in Mendix
An improper access control vulnerability in Mendix applications was discovered. In case of access to an active user session, the vulnerability could allow to change that user’s password bypassing password validations within a Mendix application. Siemens has r…
-
Medium
SSA-414513: Information Disclosure Vulnerability in Mendix
An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data. Siemens has released updates for the affected products and recommends to update to the latest versions.
first Apr 12, 2022 -
HighSSA-348662 2 CVEs
SSA-348662: Multiple Vulnerabilities in SIMATIC MV500 Devices before V3.3
SIMATIC MV500 devices before V3.3 are affected by multiple vulnerabilities that could allow attackers to hijack other users' web based management sessions (CVE-2022-33137) or access data on the device without prior authentication (CVE-2022-33138). Siemens has…
-
CriticalSSA-111512 1 CVE
SSA-111512: Client-side Authentication in SIMATIC WinCC OA
SIMATIC WinCC OA implements client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without bei…
-
MediumSSA-911567 2 CVEs
SSA-911567: Missing HTTP headers in SINEMA Remote Connect Server before V3.0 SP2
SINEMA Remote Connect Server is missing HTTP security headers on the web server. This could aid attackers by making the servers more prone to clickjacking, channel downgrade attacks and other similar client-based attack vectors. Siemens has released an update…
-
HighSSA-740594 2 CVEs
SSA-740594: Privilege Escalation Vulnerability in Mendix SAML Module
The latest updates of Mendix the SAML module fixes two vulnerabilities. One is an XML External Entity (XXE) attack that could allow an attacker to potentially disclose confidential data under certain circumstances the other is an Cross Site Scripting (XSS) at…
-
HighSSA-693555 1 CVE
SSA-693555: Memory Corruption Vulnerability in EN100 Ethernet Module
EN100 Ethernet module is affected by memory corruption vulnerability (CVE-2022-30937). Siemens has released an update for the EN100 Ethernet module IEC 61850 variant and recommends to update to the latest version. Siemens recommends specific countermeasures f…
-
High
SSA-679335: Multiple Vulnerabilities in Embedded FTP Server of SIMATIC CP Modules
SIMATIC CP 1543-1 and CP 1545-1 devices are affected by multiple vulnerabilities in ProFTPD, a third party component, that could allow a remote attacker to access sensitive information and execute arbitrary code. Siemens has released updates for the affected …
first Aug 10, 2021 -
High
SSA-662649: Denial of Service Vulnerability in Desigo DXR and PXC Controllers
A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to disable and reset a device to factory state using a denial of service attack. Siemens has released updates for the affected products and recommends to update…
first May 10, 2022 -
Critical
SSA-626968: Multiple Webserver Vulnerabilities in Desigo PXC and DXR Devices
Desigo PXC3, PXC4, PXC5 and DXR2 devices contain multiple vulnerabilities in the webserver application that could allow an attacker to potentially intercept unencrypted transmission of sensitive information, cause a denial of service condition, or perform rem…
first May 10, 2022 -
Medium
SSA-535997: Cleartext Storage of Sensitive Information in Multiple SIMATIC Products
A cleartext vulnerability was found in the SIMATIC communication processors CP 1543-1 and CP 1545-1 that could allow an attacker to read sensitive information. Siemens has released updates for the affected products and recommends to update to the latest versi…
first Sep 14, 2021 -
MediumSSA-401167 1 CVE
SSA-401167: Cross-site scripting Vulnerability in Teamcenter Active Workspace
Teamcenter Active Workspace is affected by a cross site scripting vulnerability. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
HighSSA-388239 1 CVE
SSA-388239: Default Password Leakage affecting the Component Shared HIS used in Spectrum Power Systems
Siemens has been made aware of a default password leakage in the internet affecting the component Shared HIS (SHHIS) used in Spectrum Power systems. The products listed below are affected by this default password leakage. This could allow an attacker to acces…
-
High max 7.8
SSA-330556: PwnKit Vulnerability in SCALANCE LPE9403 and SINUMERIK Edge Products (CVE-2021-4034)
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and reco…
-
High max 7.8
SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization
Siemens has released updates for JT2Go, Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the app…
first Feb 8, 2022 -
Critical max 7.8
SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.0
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recom…
-
High max 7.5
SSA-148078: Multiple Vulnerabilities in APOGEE/TALON Field Panels
Multiple vulnerabilities in the APOGEE PXC and TALON TC series of products could allow unauthenticated attackers to download sensitive information through the integrated webserver. Siemens has released updates for several affected products and recommends to u…
first Oct 12, 2017 -
MediumSSA-145224 1 CVE
SSA-145224: Vulnerability in OSPF Packet Handling of SCALANCE XM-400 and XR-500 Devices
SCALANCE XM-400 and XR-500 devices contain a vulnerability in the OSPF protocol implementation that could allow an unauthenticated remote attacker to cause interruptions in the network. Siemens has released updates for the affected products and recommends to …
-
High
SSA-787292: Denial of Service Vulnerability in SIMATIC RFID Readers
The latest updates for SIMATIC RF products fix a vulnerability that could allow an unauthorized attacker to crash the OPC UA service of the affected devices. Siemens has released updates for the affected products and recommends to update to the latest version…
first Jun 8, 2021 -
High
SSA-756638: Vulnerabilities in Third-Party Component Mbed TLS of LOGO! CMR Family and SIMATIC RTU 3000 Family
Devices of the LOGO! CMR family and the SIMATIC RTU 3000 family are affected by several vulnerabilities in the third party component Mbed TLS. They could allow an attacker with access to any of the interfaces of an affected device to impact the availability o…
first Sep 14, 2021 -
MediumSSA-736385 1 CVE
SSA-736385: Memory Corruption Vulnerability in OpenV2G
The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.
-
Critical
SSA-560465: DHCP Client Vulnerability in VxWorks-based Industrial Products
Various industry products are affected by a DHCP client vulnerability in Wind River VxWorks, that could allow an attacker to cause a heap-based buffer overflow. Siemens has released updates for several affected products and recommends to update to the latest …
first Jul 13, 2021 -
HighSSA-553086 6 CVEs
SSA-553086: Multiple File Parsing Vulnerabilities in JT2Go and Teamcenter Visualization
Siemens has released updates for JT2Go and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as CGM, TIFF or TG4) with any of the affected products, this could lead the application to…
-
HighSSA-480937 1 CVE
SSA-480937: Denial of Service Vulnerability in CP 44x-1 RNA before V1.5.18
Siemens has released a new version for the communication processor modules CP 44x-1 RNA that fixes a vulnerability that could allow an attacker to cause a denial of service condition. Siemens has released updates for the affected products and recommends to up…
-
Critical max 9.8SSA-165073 11 CVEs
SSA-165073: Multiple Vulnerabilities in the Webinterface of SICAM P850 and SICAM P855 Devices
Multiple vulnerabilities were identified in the webserver of SICAM P850 and SICAM P855 devices. These include unauthenticated access to web-interface functionality, missing HTTPS or impersonation as well as cross-site scripting related vulnerabilities. Siemen…
-
HighSSA-162616 1 CVE
SSA-162616: File Parsing Vulnerabilities in Simcenter Femap before V2022.2
Siemens Simcenter Femap versions before V2022.2 are affected by an out of bounds write vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attac…