874 results · Feed
-
Medium max 6.5
SSA-194557: Improper Limitation of Filesystem Access through Web Server Vulnerability in SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the access of the web server to the filesystem. This could allow an authenticated remote attacker to read arbitrary files or the entire filesystem of the device. Siemens has released new versions for the affec…
first Jan 14, 2025 -
Medium max 4.7
SSA-876787: Open Redirect Vulnerability in SIMATIC S7-1500 and S7-1200 CPUs
Several SIMATIC S7-1500 and S7-1200 CPU versions are affected by an open redirect vulnerability that could allow an attacker to make the web server of affected devices redirect a legitimate user to an attacker-chosen URL. For a successful attack, the legitima…
first Oct 8, 2024 -
High max 7.5
SSA-625789: Multiple Vulnerabilities in SIMATIC S7-1200 CPU V1/V2 Devices
SIMATIC S7-1200 CPU V1/V2 controllers contain two vulnerabilities that could allow an unauthenticated remote attacker - to trigger functions by record and playback of legitimate network communication, or - to place the controller in stop/defect state by causi…
first Jun 10, 2011 -
High max 7.5
SSA-614723: Denial of Service Vulnerabilities in User Management Component (UMC)
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update …
first May 13, 2025 -
High max 7.8SSA-541582 4 CVEs
SSA-541582: Multiple File Parsing Vulnerabilities in Solid Edge
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted PRT files format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new ve…
-
Critical max 9.8SSA-486936 1 CVE
SSA-486936: Authentication Vulnerability in SIMATIC ET 200SP Communication Processors
SIMATIC ET 200SP communication processors (CP 1542SP-1, CP 1542SP-1 IRC and CP 1543SP-1, incl. SIPLUS variants) contain an authentication vulnerability that could allow an unauthenticated remote attacker to access the configuration data. Siemens has released …
-
High max 8.1
SSA-373591: Buffer Overflow Vulnerability in RUGGEDCOM ROS Devices
The latest update for RUGGEDCOM ROS devices fixes a buffer overflow vulnerability in the third party component that could allow an attacker with network access to an affected device to cause a remote code execution condition. Siemens has released updates for …
first Jul 13, 2021 -
Medium max 6.2
SSA-367714: Improper Integrity Check of Firmware Updates in SiPass integrated AC5102 / ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens recommends specific countermeasures for produc…
first May 23, 2025 -
High max 8.8SSA-318832 1 CVE
SSA-318832: SQL Injection Vulnerability in SINEC NMS
SINEC NMS is affected by SQL injection vulnerability that could allow an authenticated low privileged attacker to exploit by inserting malicious data and achieve privilege escalation. Siemens has released a new version for SINEC NMS and recommends to update t…
-
Critical
SSA-279823: Cross-Site Scripting Vulnerability in SIMATIC S7-1200 CPU V2/V3 Before V3.0.2
The web server on SIMATIC S7-1200 CPU V2/V3 Before V3.0.2 contains a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via a crafted URI. Siemens has released a new version for SIMATIC S7-1200 CP…
first Oct 8, 2012 -
High
SSA-240718: Insecure Storage of HTTPS CA Certificate in SIMATIC S7-1200 CPU V2
SIMATIC S7-1200 CPU V2 devices contain an insufficiently protected private key used for the Certificate Authority (CA) for HTTPS connections. Possession of this key could allow remote attackers to spoof the device's web server by creating a forged web server …
first Sep 13, 2012 -
High max 8.8
SSA-083019: Multiple Vulnerabilities in RUGGEDCOM ROS Devices
Multiple vulnerabilities affect the RUGGEDCOM Operating System (ROS). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for…
first Jul 8, 2025 -
Critical max 9.8SSA-062309 1 CVE
SSA-062309: Information Disclosure Vulnerability in TeleControl Server Basic V3.1
TeleControl Server Basic V3.1 contains an information disclosure vulnerability that could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service. Siemens has rel…
-
Medium max 5.3
SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs
Several SIMATIC S7-1500 CPU versions are affected by an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain knowledge about actual and configured maximum cycle times and communication load of the CPU. Siemens has re…
first Oct 8, 2024 -
Critical max 9.8
SSA-039007: Heap-based Buffer Overflow Vulnerability in User Management Component (UMC)
Siemens User Management Component (UMC) is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to …
first Sep 10, 2024 -
Medium max 5.3SSA-916339 1 CVE
SSA-916339: Information Disclosure Vulnerability in Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to download the device encrypted database file. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
-
High max 7.8
SSA-691715: Vulnerability in OPC Foundation Local Discovery Server Affecting Siemens Products
A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and re…
first Apr 11, 2023 -
High max 7.5SSA-640476 1 CVE
SSA-640476: Denial of Service Vulnerability in Industrial Edge Management
Industrial Edge Management is affected by a vulnerability that could allow a remote attacker to cause a denial of service condition. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.
-
Critical max 9.1SSA-534283 1 CVE
SSA-534283: Insecure File Share Vulnerability in SIMATIC Virtualization as a Service (SIVaaS)
SIMATIC Virtualization as a Service (SIVaaS) is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact te…
-
High max 8.8
SSA-503939: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
first Mar 11, 2025 -
Low max 3.1SSA-494539 2 CVEs
SSA-494539: Multiple Vulnerabilities in SINEC OS
SINEC OS is affected by multiple vulnerabilities due to open UDP ports, which could allow an attacker to access non-sensitive information without authentication or potentially cause temporary denial of service. Siemens is preparing fix versions and recommends…
-
Medium max 6.3
SSA-707630: Multiple Vulnerabilities in SIMATIC RTLS Locating Manager Before V3.3
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
first Aug 12, 2025 -
High max 8.7SSA-395458 1 CVE
SSA-395458: Account Hijacking Vulnerability in Mendix SAML Module
Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.
-
Critical max 9.8
SSA-028723: Multiple OpenSSL Vulnerabilities in BFCClient Before V2.17
Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition. Siemens has released a new version fo…
first Aug 12, 2025 -
High max 6.9SSA-994087 3 CVEs
SSA-994087: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.7
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for R…
-
Medium max 5.3
SSA-914892: Race Condition Vulnerability in Basic Authentication Implementation of Mendix Runtime
The basic authentication mechanism of Mendix Runtime contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures. Siemens has released new versions for several affected products and…
first Nov 12, 2024 -
Critical max 9.1
SSA-908185: Mirror Port Isolation Vulnerability in RUGGEDCOM ROS Devices
A vulnerability was identified in RUGGEDCOM ROS devices with mirror port enabled, that could allow an attacker to inject information into the network via the mirror port. Siemens has released new versions for several affected products and recommends to update…
first Aug 8, 2023 -
Low max 2.4SSA-894058 1 CVE
SSA-894058: Improper Bandwidth Limitation of Network Packets Over Local USB Port Vulnerability in SIPROTEC 5
Affected SIPROTEC 5 devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcin…
-
High max 8.8
SSA-856721: Vulnerability in RUGGEDCOM Discovery Protocol (RCDP) of Industrial Communication Devices
The RUGGEDCOM RCDP protocol is not properly configured after commissioning of RUGGEDCOM ROS based devices and some SCALANCE X switch models and could allow unauthenticated remote users to perform administrative operations. An attacker must be in the same adja…
first Sep 28, 2017 -
High max 8.0
SSA-840800: Code Injection Vulnerability in RUGGEDCOM ROS
RUGGEDCOM ROS-based devices are vulnerable to a web-based code injection attack. To execute this attack, it is necessary to access the system via the Command Line Interface (CLI). Siemens has released new versions for several affected products and recommends …
first Jul 12, 2022 -
Medium max 5.3
SSA-787941: Denial of Service Vulnerability in RUGGEDCOM ROS devices
RUGGEDCOM ROS-based devices are vulnerable to a denial of service attack (Slowloris). By sending partial HTTP requests nonstop, with none completed, the affected web servers will be waiting for the completion of each request, occupying all available HTTP conn…
first Nov 8, 2022 -
High max 7.5
SSA-770902: Denial of Service Vulnerability in the Web Server of RUGGEDCOM ROS Devices
A denial of service vulnerability could allow an unauthorized attacker to cause total loss of availability in the web server of the affected devices. Siemens has released new versions for several affected products and recommends to update to the latest versio…
first Aug 8, 2023 -
High max 8.1SSA-769791 1 CVE
SSA-769791: Local Arbitrary Code Execution Vulnerability in COMOS Before V10.6
COMOS before V10.6 is affected by a local arbitrary code execution vulnerability in the integrated Open Design Alliance Drawings SDK. Siemens has released a new version for COMOS and recommends to update to the latest version.
-
High max 7.5
SSA-767615: Information Disclosure Vulnerability in SIPROTEC 5 Devices
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for the affected products and recommends to update to the latest v…
first Feb 11, 2025 -
Medium max 6.7
SSA-764417: Weak Encryption Vulnerability in RUGGEDCOM ROS Devices
The SSH server on RUGGEDCOM ROS devices is configured to offer weak ciphers by default. This could allow an unauthorized attacker in a man-in-the-middle position to read and modify any data passed over the connection between legitimate clients and the affecte…
first Mar 8, 2022 -
High max 7.8SSA-674084 2 CVEs
SSA-674084: File Parsing Vulnerabilities in Simcenter Femap Before V2506
Simcenter Femap contains a file parsing vulnerability that could be triggered when the application reads files in STP or BMP file format. If a user is tricked to open a malicious file with the affected application, this could lead the application to crash or …
-
Medium max 4.1SSA-665108 1 CVE
SSA-665108: Arbitrary File Upload Vulnerability in RUGGEDCOM ROX II
RUGGEDCOM ROX II devices does not properly enforce limitations on type and size of files that can be uploaded through their web interface. This could allow an attacker with a legitimate, highly privileged account on the web interface to upload arbitrary files…
-
Medium max 6.2SSA-529291 2 CVEs
SSA-529291: Information Disclosure Vulnerabilities in SICAM Q100/Q200
SICAM Q100 and Q200 devices are affected by two information disclosure vulnerabilities that could allow an authenticated local attacker to extract the SMTP account password and use the configured SMTP service for arbitrary purposes. Siemens has released new v…
-
High max 7.8SSA-517338 7 CVEs
SSA-517338: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V3.0
SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures …
-
Critical max 9.1SSA-493787 1 CVE
SSA-493787: Arbitrary Code Execution Vulnerability in SIMATIC RTLS Locating Manager Before V3.2
SIMATIC RTLS Locating Manager Before V3.2 contains an improper input validation vulnerability that could allow an authenticated remote attacker to execute arbitrary code with high privileges. Siemens has released a new version for SIMATIC RTLS Locating Manage…