874 results · Feed
-
High max 7.8SSA-584312 2 CVEs
SSA-584312: File Parsing Vulnerabilities in Simcenter Femap Before V2606 MP1
Simcenter Femap contains two file parsing vulnerabilities that could be triggered when the application reads files in BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or pot…
-
High max 8.2
SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products
Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to…
first Feb 22, 2022 -
High max 7.8SSA-138516 1 CVE
SSA-138516: Out of Bounds Read Vulnerability in Parasolid X_T File Parsing
Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in X_T format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new versions for the aff…
-
High max 7.5SSA-077553 2 CVEs
SSA-077553: Multiple Vulnerabilities in Siemens License Server (SLS)
Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the …
-
High max 7.4SSA-828211 1 CVE
SSA-828211: Denial of Service Vulnerability in SIMATIC S7-PLCSIM Advanced
SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
-
Critical max 8.8SSA-734552 1 CVE
SSA-734552: Buffer Overflow Vulnerability in OpenSSL Affecting Desigo CC
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends t…
-
Critical max 9.1
SSA-688146: Multiple Cross-Site Scripting Vulnerabilities in SIMATIC S7 PLCs Web Server
SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to perform cross-site scripting attacks. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens i…
first May 12, 2026 -
Critical max 9.8SSA-585531 12 CVEs
SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the …
-
Medium max 5.3
SSA-555707: Information Disclosure Vulnerability in Simcenter STAR-CCM+
Simcenter STAR-CCM+ contains an information disclosure vulnerability when using the Power-on-Demand public license server. An attacker could access a system's host, user, and display name. Siemens has updated the public Power-on-Demand public license server.
first Aug 9, 2022 -
Critical max 9.8
SSA-470355: Zlib and Foxit Vulnerabilities in CADRA
CADRA is affected by multiple zlib and Foxit vulnerabilities. Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fix…
-
Medium max 6.7SSA-288252 1 CVE
SSA-288252: Unquoted Search Path Vulnerability in IAM Client
Multiple Siemens products are affected by unquoted search path vulnerability in IAM Client. This could allow an authenticated local attacker to perform privilege escalation. Siemens has released new versions for several affected products and recommends to upd…
-
Critical max 10.0SSA-096828 1 CVE
SSA-096828: Token Invalidation Vulnerability in Opcenter X Before V2604
Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application. Siemens has released a new version for Opcenter X and recommends to update to the latest version.
-
Medium max 5.4SSA-779310 1 CVE
SSA-779310: Arbitrary Code Execution Vulnerability in Mendix Studio Pro Before V11.12
Mendix Studio Pro versions before V11.12 are affected by a file parsing vulnerability that could be triggered when the application reads specially crafted malicious project during the build pipeline. This could allow an attacker to execute arbitrary code in t…
-
Medium max 6.5
SSA-962515: Out of Bounds Read Vulnerability in Industrial Products
Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a Blue Screen of Death (BSOD) crash of the underlying Windows kernel, leading to denial of service condition. Siemens has released new versions for s…
first May 14, 2024 -
High max 7.8
SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap
Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be triggered when the application reads files in IPT or IGS format. If a user is tricked to open a malicious file with the affected ap…
first May 12, 2026 -
High max 8.8SSA-860189 4 CVEs
SSA-860189: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 6
SINEC INS before V1.0 SP2 Update 6 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.
-
Critical max 9.0
SSA-723487: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SCALANCE, RUGGEDCOM and Related Products
This advisory documents the impact of CVE-2024-3596 (also dubbed "Blastradius"), a vulnerability in the RADIUS protocol, to SCALANCE, RUGGEDCOM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server (the…
first Jul 9, 2024 -
Critical max 9.8
SSA-722410: Multiple Vulnerabilities in User Management Component (UMC)
Siemens' User Management Component (UMC) is affected by multiple vulnerabilities that could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition. Siemens has released a new version for User Management Co…
first Sep 9, 2025 -
High max 7.5
SSA-674753: Denial-of-Service Vulnerability in ET 200 Devices
Siemens ET 200 devices contain a denial-of-service vulnerability that could be triggered by sending a valid S7 protocol Disconnect Request (COTP DR TPDU), causing the device to become unresponsive and require a power cycle to recover. Siemens has released new…
first Jan 13, 2026 -
Medium max 6.1SSA-139483 1 CVE
SSA-139483: File Upload Vulnerability in SIPROTEC 5 Using DIGSI5 Protocol
SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, u…
-
High max 7.1SSA-063511 1 CVE
SSA-063511: Insufficient protection of key material in WinCC Certificate Manager
WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information. Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens r…
-
Critical max 9.8SSA-253495 77 CVEs
SSA-253495: Multiple Vulnerabilities in SINEC OS before V4.0
SINEC OS before V4.0 contains multiple vulnerabilities. Siemens has released a new version for RUGGEDCOM RST2428P and recommends to update to the latest version.
-
High max 7.8
SSA-921111: Two File Parsing Vulnerabilities in Solid Edge Before Version SE226 Update 5
Solid Edge SE2026 before Update 5 is affected by two file parsing vulnerabilities that could be triggered when the application reads specially crafted files in PAR format. This could allow an attacker to crash the application or execute arbitrary code. Siemen…
first May 12, 2026 -
Critical max 9.4
SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.
first Mar 10, 2026 -
Medium max 6.8SSA-973901 1 CVE
SSA-973901: Arbitrary File Disclosure Vulnerability in Ruggedcom Rox Before V2.17.1
Ruggedcom Rox contains an improper access control vulnerability that could allow an authenticated remote attacker to read arbitrary files with root privileges from the underlying operating system's filesystem. Siemens has released new versions for the affecte…
-
High max 4.8SSA-876049 1 CVE
SSA-876049: Prototype Pollution Vulnerability in Axios Library Affecting Siemens gWAP Before V3.1.1
Siemens gPROMS Web Applications Publisher (gWAP) is affected by a remote code execution vulnerability introduced through a third-party component, namely the Axios HTTP client library. The vulnerability stems from a specific "Gadget" attack chain that allows p…
-
High max 7.5SSA-827383 3 CVEs
SSA-827383: Multiple Vulnerabilities in Teamcenter
Siemens Teamcenter is affected by multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
Medium max 5.3SSA-786884 1 CVE
SSA-786884: Insufficient Randomness in Session Identifier Vulnerability in SIPROTEC 5
The SIPROTEC 5 devices do not use sufficiently random numbers to generate session identifiers. This could facilitate a brute-force attack against a valid session identifier which could allow an unauthenticated remote attacker to hijack a valid user session. T…
-
Critical max 9.1SSA-783943 1 CVE
SSA-783943: HTTP Request Smuggling Vulnerability in SENTRON 7KT PAC1261 Data Manager Before V2.1.0
The web server in SENTRON 7KT PAC1261 Data Manager Before V2.1.0 contains a request smuggling vulnerability in the Go Project's net/http package that could allow an attacker to retrieve authorization tokens that can be used to gain administrative control over…
-
Critical max 9.1SSA-577017 35 CVEs
SSA-577017: Multiple Vulnerabilities in Ruggedcom Rox Before 2.17.1
Ruggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
Critical max 9.6
SSA-452276: Eval Injection Vulnerability in SIMATIC S7-1500
SIMATIC S7-1500 devices contain a vulnerability that could allow an attacker to inject code by tricking a legitimate user into importing a specially crafted trace file in the web interface. Siemens has released new versions for several affected products and r…
first Mar 10, 2026 -
High max 7.7SSA-387223 1 CVE
SSA-387223: Unauthenticated Control Panel Escape Vulnerability on SIMATIC HMI Unified Comfort before V21.0
SIMATIC HMI Unified Comfort Panels before V21.0 are affected by a vulnerability that allows an unauthenticated attacker to access the web browser via the help link. This vulnerability allows an attacker to access the web browser through the Control Panel if i…
-
Critical max 9.1SSA-357982 1 CVE
SSA-357982: Path Traversal Vulnerability in ROS# Before 2.2.2
ROS# contains a ROS service file_server, that before version 2.2.2 contains a path traversal vulnerability which could allow an attacker to access, i.e. read and write, arbitrary files, which are accessible with the user rights of the user that runs the servi…
-
Low max 3.7
SSA-280834: Improper OpenVPN Credential Validation Vulnerability in SCALANCE M-800 and SC-600 Families
SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for the affected products and recommends to update to the latest versions.
first Mar 11, 2025 -
High max 9.3SSA-085541 1 CVE
SSA-085541: Missing Authentication in Critical Function in ActiveMQ Artemis (CVE-2026-27446) in Opcenter RDnL
Opcenter RDnL is affected by missing authentication in critical function in ‘ActiveMQ Artemis’. An unauthenticated attacker within the adjacent network could use the Core protocol to force a target broker to establish an outbound Core federation connection to…
-
Critical max 9.1SSA-081142 1 CVE
SSA-081142: Arbitrary Code Execution Vulnerability in Ruggedcom Rox Before 2.17.1
Ruggedcom Rox contains an input validation vulnerability in the Scheduler functionality that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new versions …
-
High max 7.5SSA-078743 1 CVE
SSA-078743: Remote Code Execution Vulnerability in Ruggedcom Rox Before V2.17.1
Ruggedcom Rox contains an input validation vulnerability in the feature key installation process that could allow an authenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system. Siemens has released new …
-
Critical max 9.8
SSA-032379: Multiple Vulnerabilities in SIMATIC CN 4100 Before V5.0
SIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.
-
Critical max 10.0
SSA-001536: Authorization Bypass Vulnerability in Siemens Industrial Edge Devices
Siemens Industrial Edge Devices contain an authorization bypass vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products …
first Jan 13, 2026 -
Low max 3.7SSA-981622 1 CVE
SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated remote attacker to perform man in the middle attacks. Siemens has released new versions for the affected products a…