874 results · Feed
-
Critical max 8.2
SSA-114589: Multiple Vulnerabilities in Nucleus RTOS based APOGEE, TALON and Desigo PXC/PXM Products
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. The products …
first Nov 9, 2021 -
HighSSA-998762 3 CVEs
SSA-998762: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.2
Siemens Simcenter Femap versions before V2022.1.2 are affected by vulnerabilities that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage …
-
High max 8.8
SSA-995338: Multiple Vulnerabilities in COMOS Web
Multiple vulnerabilities were identified in the web components of COMOS that could allow an attacker to conduct code injections, store data in undesired locations, execute arbitrary SQL statements, and run cross-site request forgery attacks. Siemens has relea…
first Jan 11, 2022 -
LowSSA-870917 1 CVE
SSA-870917: Improper Access Control Vulnerability in Mendix
When querying the database, it is possible to sort the results using a protected field. With this an authenticated attacker could extract information about the contents of a protected field. Siemens has released updates for the affected products and recommend…
-
CriticalSSA-836527 9 CVEs
SSA-836527: Multiple Vulnerabilities in SCALANCE X-300 Switch Family Devices
Several SCALANCE X-300 switches contain multiple vulnerabilities. An unauthenticated attacker could reboot, cause denial of service conditions and potentially impact the system by other means through heap and buffer overflow vulnerabilities. Siemens has relea…
-
Medium max 7.5
SSA-672373: Vulnerabilities in CP 1543-1 before V2.0.28
SIMATIC CP 1543-1 devices before V2.0.28 contain two vulnerabilities that could allow authorized users to escalate their privileges on the CP or create a denial of service condition. Siemens has released updates for the affected products and recommends to upd…
first Nov 18, 2016 -
CriticalSSA-655554 3 CVEs
SSA-655554: Multiple Vulnerabilities in SIMATIC Energy Manager before V7.3 Update 1
SIMATIC Energy Manager is affected by multiple vulnerabilities that could allow an attacker to gain local privilege escalation, local code execution or remote code execution. Siemens has released updates for the affected products and recommends to update to t…
-
Medium
SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM
The Subversion Webclient in Polarion ALM contains a cross-site scripting vulnerability, that could be triggered by an attacker by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Subversion Webclient in Po…
first Mar 8, 2022 -
High
SSA-535640: Vulnerability in Industrial Products
Various industrial products use the Discovery Service of the OPC UA protocol stack by the OPC foundation https://github.com/OPCFoundation/UA-.NETStandard and could therefore be affected by the remote resource consumption attacks (CVE-2017-12069).
first Aug 30, 2017 -
HighSSA-392912 3 CVEs
SSA-392912: Multiple Denial Of Service Vulnerabilities in SCALANCE W1700 Devices
Vulnerabilities have been identified in devices of the SCALANCE W-1700 (11ac) family that could allow an attacker to cause various denial of service conditions. Siemens has released updates for the affected products and recommends to update to the latest vers…
-
MediumSSA-350757 1 CVE
SSA-350757: Improper Access Control Vulnerability in TIA Portal Affecting S7-1200 and S7-1500 CPUs Web Server (Incl. Related ET200 CPUs and SIPLUS variants)
An attacker could achieve privilege escalation on the web server of certain devices configured by SIMATIC STEP 7 (TIA Portal) due to incorrect handling of the webserver's user management configuration during downloading. This only affects the S7-1200 and S7-1…
-
High
SSA-348629: Denial-of-Service Vulnerability in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC Software
A Denial-of-Service vulnerability has been identified in SIMATIC PCS 7, SIMATIC WinCC, SIMATIC WinCC Runtime Professional and SIMATIC NET PC-Software. Siemens has released updates for several affected products and recommends to update to the latest versions. …
first Mar 27, 2018 -
MediumSSA-316850 1 CVE
SSA-316850: Unauthenticated File Access in SICAM A8000 Devices
SICAM A8000 CP-8050 and CP-8031 devices contain vulnerabilities that could allow an attacker to access files without authentication. Siemens has released updates for the affected products and recommends to update to the latest versions.
-
Low
SSA-273799: Message Integrity Protection Bypass Vulnerability in SIMATIC Products
A message integrity protection bypass vulnerability has been identified in several SIMATIC products. The vulnerability could allow an attacker in a Man-in-the-Middle position to modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, …
first Dec 10, 2019 -
Medium
SSA-703715: Information Disclosure Vulnerability in Climatix POL909 (AWM and AWB)
Climatix POL909 (AWM and AWB) contains an information disclosure vulnerability that could allow a man-in-the-middle attacker to read sensitive data, such as administrator credentials, or modify data in transit. Siemens has released an update for Climatix POL9…
first Nov 9, 2021 -
Medium max 6.5
SSA-669158: DNS Client Vulnerabilities in SIMOTICS CONNECT 400
SIMOTICS CONNECT 400 is affected by DNS Client vulnerabilities as initially reported in Siemens Security Advisory SSA-705111 (https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf) for the DNS Module in Nucleus RTOS. Siemens has released updates for …
first Apr 13, 2021 -
CriticalSSA-594438 1 CVE
SSA-594438: Remote Code Execution and Denial-of-Service Vulnerability in multiple RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, NSS, could allow an attacker to remotely execute code or cause a denial-of-service condition due to the way it verifies security certificates. Siemens has released updates for the affected p…
-
Medium
SSA-541018: Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SENTRON PAC / 3VA Devices (Part 2)
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as "AMNESIA:33" vulnerabilities. This advisory describes the impact of two of these vulnerabilities (CVE-2020-13987, CVE-202…
first Mar 9, 2021 -
Medium
SSA-534763: Special Register Buffer Data Sampling (SRBDS) aka Crosstalk in Industrial Products
Security researchers published information on a vulnerability known as Crosstalk (INTEL-SA-00320). This vulnerability affects modern Intel processors to a varying degree. Several Siemens Industrial Products contain processors that are affected by the vulnerab…
first Sep 8, 2020 -
High
SSA-501073: Vulnerabilities in Controllers CPU 1518 MFP using Intel CPUs (November 2020)
Intel has published information on vulnerabilities in Intel products in November 2020. This advisory lists the Siemens Controllers that are affected by these vulnerabilities. In this advisory we take a representative CVE from each advisory: - “Intel CSME, SPS…
first May 11, 2021 -
HighSSA-415938 1 CVE
SSA-415938: Improper Access Control Vulnerability in Mendix
A vulnerability in Mendix Studio Pro was discovered, that, if acted upon by a malicious user, could allow to retrieve the status of a job run by another user in certain cases. Mendix has released updates for the affected product lines, recommends to update to…
-
High max 7.4SSA-406691 1 CVE
SSA-406691: Buffer Vulnerabilities in DHCP function of RUGGEDCOM ROX products
A vulnerability in the RUGGEDCOM ROX devices' third party component, ISC DHCP, could allow an attacker to cause a buffer overrun due to a bug when reading a stored DHCP lease containing certain option information, eventually leading to a denial-of-service con…
-
Critical max 9.8SSA-389290 71 CVEs
SSA-389290: Third-Party Component Vulnerabilities in SINEC INS
71 vulnerabilities in third-party components as Node.js, cURL, SQLite, CivetWeb and DNS(ISC BIND) could allow an attacker to interfere with the affected product in various ways. Siemens has released an update for SINEC INS and recommends to update to the late…
-
HighSSA-337210 1 CVE
SSA-337210: Privilege Escalation Vulnerability in SINUMERIK MC
The NC plug-in card in SINUMERIK MC contains a privilege escalation vulnerability that could allow local attackers to escalate their privileges to root. This allows full access to the device, including read and modifying G code. Siemens has released updates f…
-
MediumSSA-252466 3 CVEs
SSA-252466: Multiple Vulnerabilities in Climatix POL909 (AWM and AWB)
Multiple vulnerabilities have been identified in the Climatix POL909 (AWM and AWB) that could allow an unauthenticated attacker to hijack and redirect users to a malicious webpage, or allow an authenticated attacker to access sensitive files. Siemens has rele…
-
High max 8.2SSA-223353 4 CVEs
SSA-223353: Multiple Vulnerabilities in Nucleus RTOS based SIMOTICS CONNECT 400
Multiple vulnerabilities (also known as “NUCLEUS:13”) have been identified in the Nucleus RTOS (real-time operating system), originally reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. SIMOT…
-
HighSSA-166747 1 CVE
SSA-166747: Scene File Parsing Vulnerability in Simcenter STAR-CCM+ Viewer before V2022.1
Siemens Simcenter STAR-CCM+ Viewer is affected by a memory corruption vulnerability that could be triggered when the application reads scene (.sce) files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash,…
-
HighSSA-155599 15 CVEs
SSA-155599: File Parsing Vulnerabilities in COMOS
COMOS uses Drawings SDK from Open Design Alliance that is affected by multiple vulnerabilities that could be triggered when the application reads files in DGN, DXF or DWG file formats. If a user is tricked to open a malicious file with the affected applicatio…
-
CriticalSSA-134279 2 CVEs
SSA-134279: Vulnerability in Mendix Forgot Password Appstore module
Mendix Forgot Password Appstore module contains two vulnerabilities that could allow unauthorized users to take over accounts. Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.
-
HighSSA-949188 2 CVEs
SSA-949188: File Parsing Vulnerabilities in Simcenter Femap before V2022.1.1
Siemens Simcenter Femap versions before V2022.1.1 are affected by vulnerabilities that could be triggered when the application reads files in .NEU or .BDF format. If a user is tricked to open a malicious file with the affected application, an attacker could l…
-
Critical
SSA-455843: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products
CISA and WIBU Systems disclosed six vulnerabilities in different versions of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerabilities are described in the section "Vulnerability Cla…
first Sep 8, 2020 -
MediumSSA-831168 1 CVE
SSA-831168: Cross-Site Scripting Vulnerability in Spectrum Power 4
A Cross-Site Scripting (XSS) vulnerability is found in the integrated web application "Online Help" of Spectrum Power 4. Siemens has released an update for the Spectrum Power 4 and recommends to update to the latest version.
-
Critical
SSA-675303: WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens Products
WIBU Systems published information about two vulnerabilities and an associated fix release version of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens products for license management. The vulnerabilities are described in the s…
first Jul 13, 2021 -
MediumSSA-654775 1 CVE
SSA-654775: Open Redirect Vulnerability in SINEMA Remote Connect Server
An open redirect vulnerability in SINEMA Remote Connect Server could allow an attacker to steal logon credentials with a specially crafted malicious link. Siemens has released software update for the SINEMA Remote Connect Server and recommends to update to th…
-
HighSSA-609880 11 CVEs
SSA-609880: File Parsing Vulnerabilities in Simcenter Femap before V2022.1
Siemens Simcenter Femap is affected by multiple vulnerabilities that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnerability …
-
Medium
SSA-316383: NumberJack Vulnerability in LOGO! CMR and SIMATIC RTU 3000 devices
A vulnerability has been identified in the underlying TCP/IP stack of LOGO! CMR and SIMATIC RTU 3000 devices. It could allow an attacker with network access to the LAN interface of an affected device to hijack an ongoing connection or spoof a new one. The WAN…
first Sep 14, 2021 -
Critical max 3.7
SSA-211752: Multiple NTP-Client Related Vulnerabilities in SIMATIC CP 443-1 OPC UA
All versions of the SIMATIC CP 443-1 OPC UA contain multiple vulnerabilities in the underlying third party component NTP. Siemens recommends specific countermeasures for products where updates are not, or not yet available.
first Jun 8, 2021 -
High
SSA-100232: Denial-of-Service vulnerability in SCALANCE X Switches
A vulnerability in several SCALANCE X devices could allow an unauthenticated attacker with network access to an affected device to perform a denial-of-service. Siemens has released an update for SCALANCE X-200IRT and recommends to update to the latest version…
first Aug 13, 2019 -
Critical max 10.0
SSA-714170: Apache Log4j Vulnerabilities (Log4Shell, CVE-2021-44228, CVE-2021-45046) - Impact to SPPA-T3000
On 2021-12-09, a vulnerability in Apache Log4j (a logging library used in many Java-based applications) was disclosed, that could allow remote unauthenticated attackers to execute code on vulnerable systems. The vulnerability is tracked as CVE-2021-44228 and …
first Dec 16, 2021 -
High max 8.2SSA-845392 6 CVEs
SSA-845392: Multiple Vulnerabilities in Nucleus RTOS based Siemens Energy PLUSCONTROL 1st Gen Devices
Multiple vulnerabilities (also known as "NUCLEUS:13") have been identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf. PLUSCONTROL 1…