874 results · Feed
-
Medium max 6.6
SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
The products listed below contain a vulnerability that could allow an attacker to perform an out-of-bound read, potentially leading to information disclosure or denial of service of the TPM. Siemens has released new versions for several affected products and …
first Apr 14, 2026 -
Critical max 9.6SSA-591731 8 CVEs
SSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web Server
SIMATIC S7-1500 devices contain multiple vulnerabilities in the web server that could allow an attacker to execute malicious code in an authorized user’s browser session and perform PLC operations within the scope of that user’s authorization. Siemens is prep…
-
High max 8.1
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
Several tools for the SIMOTION system are affected by a local privilege escalation vulnerability. This could allow an attacker to execute arbitrary code with SYSTEM privileges when a legitimate user installs an application that uses the affected setup compone…
first Sep 9, 2025 -
High max 8.8SSA-550198 1 CVE
SSA-550198: Authenticated Remote Code Execution in WinCC
Multiple SIMATIC WinCC versions are affected by a database privilege escalation vulnerability that could allow an authenticated user with access to the database to execute commands on the underlying host system. Siemens has released new versions for several a…
-
High max 8.3
SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters
KACO blueplanet Inverters contain multiple vulnerabilities that could allow an attacker to derive the credentials from the devices serial number and misuse them to gain unauthorized access. KACO new energy GmbH has released new versions for several affected p…
first May 12, 2026 -
High max 8.8SSA-508506 11 CVEs
SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW
RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as mod…
-
Critical max 9.8
SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version >= V3.1.0 and < V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally ide…
first Dec 12, 2023 -
High max 7.3
SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20
Affected products contain a local arbitrary code execution vulnerability that could allow an attacker to perform actions against the operation system of that environment. Siemens has released new versions for several affected products and recommends to update…
first Dec 10, 2024 -
Critical max 9.1SSA-377139 2 CVEs
SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit
Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices (for Siemens Industrial Edge devices see Additional Information). Industrial Edge Device Kit contains multiple path traversal vulnerabilities that cou…
-
High max 8.2SSA-333035 5 CVEs
SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products
The products listed below contain multiple vulnerabilities that could allow an attacker to cause a denial of service and potentially impact the availability of the affected device. Siemens has released new versions for several affected products and recommends…
-
High max 7.6
SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices
LOGO! 8 BM (incl. SIPLUS variants) contains multiple vulnerabilities. These could allow an attacker to execute code remotely, put the device into a denial of service state, or change the behavior of the device. Siemens has released new versions for the affect…
first Nov 11, 2025 -
Critical max 10.0
SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. Siemens…
first Apr 9, 2024 -
High max 7.7SSA-159454 1 CVE
SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs
The products listed below contain a vulnerability that could allow an attacker to boot an operating system or UEFI application signed with that test key, bypassing UEFI Secure Boot protections even when Secure Boot is enabled. Siemens has released new version…
-
High max 7.0SSA-148322 1 CVE
SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL
PSS(R)SINCAL uses WibuKey third-party product that contains an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to cause a system crash, resulting in a denial-of-service condition. This affects PSS SINCAL only when configured to…
-
Medium max 5.8SSA-099819 1 CVE
SSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM Fuse
SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service (DoS) condition. Successful exploitation may require the affected network to be re-establ…
-
Critical max 10.0
SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and reco…
first Jun 10, 2025 -
Medium max 5.3SSA-055299 1 CVE
SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
The products listed below contain an out-of-bounds read vulnerability that could allow an attacker to cause abnormal product behavior, instability, or denial of service. Siemens has released a new version for Capital Embedded AR Classic R20-11 and recommends …
-
Critical max 10.0
SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and reco…
first Jul 14, 2026 -
Medium max 6.1
SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process
Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for the affected products …
first Jun 12, 2025 -
Unscored max 9.1
SSA-814963: Insecure Inherited Permission in Mendix (Revoked)
This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute.
first Jul 14, 2026 -
Medium max 6.5SSA-823812 1 CVE
SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices
The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released …
-
High max 8.6SSA-517424 1 CVE
SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT
SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
Critical max 9.1SSA-503852 1 CVE
SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Management
Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification. Siemens has released new versi…
-
High max 8.2
SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products
WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products. Siemens has relea…
first Aug 12, 2025 -
High max 8.2SSA-330084 1 CVE
SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family
A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics co…
-
High max 7.8
SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products
Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific count…
-
High max 7.8
SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403
SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends spec…
first May 13, 2025 -
Critical max 9.0SSA-254516 1 CVE
SSA-254516: Arbitrary File Upload in OIS Web Module
A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead …
-
High max 7.2
SSA-229470: Multiple Vulnerabilities in SICAM 8 Products Before V26.20
Multiple SICAM 8 products are affected by multiple vulnerabilities that could lead to denial of service, namely: - SICAM A8000 Device firmware - CPCI85 for CP-8031/CP-8050 - SICORE for CP-8010/CP-8012 - SICAM EGS Device firmware - CPCI85 - SICAM S8000 - SICOR…
first Jul 9, 2026 -
High max 8.2
SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs
Multiple vulnerabilities has been identified in Siemens SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs that can allow an authenticated attacker to alter the secure boot and password configurations. Siemens has released new versions of BIOS for severa…
first Mar 11, 2025 -
Medium max 6.1SSA-157465 1 CVE
SSA-157465: Reflected Cross-site scripting Vulnerability in Teamcenter
A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Successful exploitation …
-
Critical max 9.8SSA-142885 14 CVEs
SSA-142885: Multiple Vulnerabilities in Reyrolle 7SR5 Before V2.70
Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.
-
High max 7.6SSA-682041 1 CVE
SSA-682041: Cross Site Scripting Vulnerability in Element Maps
The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hover…
-
High max 7.8
SSA-069220: Stack Overflow Vulnerability in Simcenter Nastran Before V2606
Simcenter Nastran is affected by a stack overflow vulnerability that could be triggered when an application binary reads arbitrary string as a file argument. If a user is tricked to run one of the impacted application binary with a malicious string, an attack…
first Aug 11, 2026 -
High max 8.9
SSA-827968: Vulnerability in Nozomi Guardian/CMC Before V26.2.0 on RUGGEDCOM APE1808 Devices
Nozomi Networks has published information on vulnerabilities in Nozomi Guardian/CMC. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to upda…
first Jan 13, 2026 -
Critical max 9.1SSA-825228 1 CVE
SSA-825228: Potential Remote Code Execution in Siveillance Video Management Servers
Siveillance Video Management Servers contains a vulnerability that could allow a Remote Code Execution attack. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
Medium max 4.3SSA-781903 1 CVE
SSA-781903: Denial of Service Vulnerability in Desigo DXR and PXC Controllers
A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functionality. Siemens h…
-
Medium max 6.8SSA-751328 2 CVEs
SSA-751328: Recoverable Hardcoded AES Master Key in Siemens LOGO! Soft Comfort
Siemens LOGO! Soft Comfort contains multiple vulnerabilities in its project-file encryption and password handling mechanisms. A local attacker could exploit these vulnerabilities to extract the master key, allowing them to decrypt project data or remove proje…
-
High max 7.9
SSA-686975: IPU 2022.3 Vulnerabilities in Siemens Industrial Products using Intel CPUs
Intel has published information on vulnerabilities in Intel products in November 2022. This advisory lists the related Siemens Industrial products affected by these vulnerabilities that can be patched by applying the corresponding BIOS update ("2022.3 IPU – B…
first Feb 14, 2023 -
High max 7.8SSA-621657 7 CVEs
SSA-621657: File Parsing Vulnerabilities in Solid Edge Before Version SE2026 Update 7
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR, PSM or DFT format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has …