874 results · Feed
-
Medium max 6.5SSA-668154 1 CVE
SSA-668154: Denial of Service Vulnerability in MS/TP Point Pickup Module
MS/TP Point Pickup Module devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's norma…
-
High max 7.8SSA-542540 1 CVE
SSA-542540: Out of Bounds Read Vulnerability in Teamcenter Visualization
Siemens Teamcenter Visualization contains a out-of-bound read vulnerability that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected products, this could lead the applicatio…
-
High max 7.5SSA-523418 1 CVE
SSA-523418: Information Disclosure Vulnerability in Desigo CC
Desigo CC deployments that use Installed Client are impacted by an information disclosure vulnerability which could result in information leak from the Desigo CC server. The other Desigo CC client options, Windows App Client and Flex Client, are not affected …
-
Critical max 9.8
SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM A…
first Apr 9, 2024 -
High max 8.8SSA-339086 1 CVE
SSA-339086: Insufficient Session Expiration Vulnerability in SIMATIC PCS neo
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
-
High max 7.5SSA-222768 3 CVEs
SSA-222768: Multiple Vulnerabilities in SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems
SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems only provide weak password obfuscation. An attacker with access to the PROFINET or serial interface of the device could eavesdrop or read the stored password from the device and de-obfuscate it. The sa…
-
Medium max 6.5SSA-162255 4 CVEs
SSA-162255: Multiple Vulnerabilities in Polarion Before V2410
Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix th…
-
High max 8.6
SSA-103653: Denial-of-Service Vulnerability in Automation License Manager
A vulnerability was identified in the Automation License Manager software that could be triggered by sending specially crafted packets to port 4410/tcp of an affected system. This could cause a denial-of-service preventing legitimate users from using the syst…
first Sep 10, 2024 -
Critical max 10.0SSA-047424 2 CVEs
SSA-047424: Code Execution and SQL Injection Vulnerabilities in OZW Web Servers
OZW672 and OZW772 Web Server versions contain vulnerabilities that could allow an attacker to execute arbitrary code on the device with root privileges (in versions before V8.0) or to authenticate as Administrator user (in versions before V6.0). Siemens has r…
-
Low max 3.7SSA-395348 1 CVE
SSA-395348: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2
TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service co…
-
Critical max 9.8SSA-443402 67 CVEs
SSA-443402: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2
TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService"…
-
Critical max 9.8SSA-817234 5 CVEs
SSA-817234: Multiple Kubernetes Ingress NGINX Controller Vulnerabilities in Insights Hub Private Cloud
Insights Hub Private Cloud is affected by multiple vulnerabilities in Ingress NGINX Controller for Kubernetes. These vulnerabilities could lead to arbitrary code execution in the context of the ingress-nginx controller, or disclosure of Secrets accessible to …
-
High max 7.8SSA-672923 1 CVE
SSA-672923: Out of Bounds Write Vulnerability in Solid Edge
Solid Edge is affected by an out of bounds write vulnerability that could be triggered when the application is parsing X_T data or a specially crafted file in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacke…
-
Medium max 6.7SSA-525431 2 CVEs
SSA-525431: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to …
-
High max 7.0
SSA-369369: Weak Registry Permission Vulnerability in SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor
SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor contain a weak registry permission vulnerability that could allow an authenticated attacker to perform privilege escalation or bypass security measures. Siemens recommends specific countermeasures for products …
first Feb 11, 2025 -
High max 9.1SSA-277137 14 CVEs
SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.700
SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the l…
-
Medium max 5.3
SSA-195895: User Enumeration Vulnerability in the Webserver of SIMATIC Products
The webserver of several SIMATIC products is affected by a user enumeration vulnerability that could allow an unauthenticated remote attacker to identify valid usernames. Siemens has released new versions for the affected products and recommends to update to …
first Feb 11, 2025 -
Critical max 10.0SSA-187636 9 CVEs
SSA-187636: Multiple Vulnerabilities in SENTRON 7KT PAC1260 Data Manager
SENTRON 7KT PAC1260 Data Manager is affected by multiple vulnerabilities as listed below. Software fixes can no longer be provided for The SENTRON 7KT PAC1260 Data Manager. This advisory documents the known open vulnerabilities. To fix the vulnerabilities, Si…
-
High max 7.8SSA-920092 1 CVE
SSA-920092: Memory Corruption Vulnerability in Simcenter Femap
Siemens Simcenter Femap is affected by memory corruption vulnerability that could be triggered when the application reads files in .NEU format. If a user is tricked to open a malicious file with the affected application, an attacker could leverage the vulnera…
-
Critical max 9.8SSA-787280 1 CVE
SSA-787280: Unlocked Bootloader Vulnerability in SINAMICS S200
A specific range of produced SINAMICS S200 devices contains an unlocked bootloader vulnerability that could allow an attacker to download untrusted firmware that could damage or compromise the device. For delivered products listed below Siemens recommends cou…
-
High max 8.2
SSA-620288: Multiple Vulnerabilities (NUCLEUS:13) in Capital Embedded AR Classic
Multiple vulnerabilities (also known as "NUCLEUS:13") have be identified in the Nucleus RTOS (real-time operating system) and reported in the Siemens Security Advisory SSA-044112: https://cert-portal.siemens.com/productcert/html/ssa-044112.html. Capital Embed…
first Dec 14, 2021 -
Critical max 9.8SSA-615740 6 CVEs
SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3
SINEMA Remote Connect Client before V3.2 SP3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Client and recommends to update to the latest version.
-
Critical max 9.1SSA-515903 3 CVEs
SSA-515903: Multiple Vulnerabilities in SiPass integrated AC5102 / ACC-G2 and ACC-AP
SiPass integrated ACC (Advanced Central Controller) devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected produ…
-
Medium max 6.8SSA-507653 2 CVEs
SSA-507653: Improper Access Control Vulnerabilities in Tecnomatix Plant Simulation
Siemens Tecnomatix Plant Simulation do not properly limit the access of the simulation model to the filesystem. This could allow an unauthorized attacker to read or delete arbitrary files or the entire filesystem of the device. Siemens has released new versio…
-
High max 7.1
SSA-434032: Input Validation Vulnerability in the DHCP Client of Nucleus RTOS
The DHCP implementation of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains a vulnerability that could allow an attacker to change the IP address of an affected device to an invalid value. Siemens has released new v…
first Nov 12, 2019 -
High max 7.5
SSA-248289: Denial of Service Vulnerabilities in the IPv6 Stack of Nucleus RTOS
The IPv6 stack of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contains two vulnerabilities when processing IPv6 headers which could allow an attacker to cause a denial of service condition. Siemens has released new vers…
first Apr 13, 2021 -
High max 8.8SSA-075201 7 CVEs
SSA-075201: Multiple Vulnerabilities in SCALANCE LPE9403 Before V4.0
SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version.
-
Medium max 9.1SSA-073066 2 CVEs
SSA-073066: Multiple Vulnerabilities in SINEMA Remote Connect Server Before V3.2 SP3
SINEMA Remote Connect Server before V3.2 SP3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEMA Remote Connect Server and recommends to update to the latest version.
-
High max 7.8SSA-050438 8 CVEs
SSA-050438: Multiple File Parsing Vulnerabilities in Teamcenter Visualization and Tecnomatix Plant Simulation
Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation contains multiple file parsing vulnerabilities that could be triggered when the application reads files in WRL format. If a user is tricked to open a malicious file with any of the affected pro…
-
Critical max 9.1SSA-992434 1 CVE
SSA-992434: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated
SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore…
-
Critical max 10.0
SSA-246355: Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence
The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below. Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version…
first Feb 11, 2025 -
Critical max 9.8SSA-769027 72 CVEs
SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0
SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 8.6
SSA-697140: Denial of Service Vulnerability in the TCP Event Service of SCALANCE and RUGGEDCOM Products
The products listed below contain a denial of service vulnerability in the TCP event interface that could allow an unauthenticated remote attacker to render the device unusable. Siemens has released updates for the affected products and recommends to update t…
first Oct 11, 2022 -
Medium max 6.2SSA-647005 1 CVE
SSA-647005: Memory Corruption Vulnerability in OpenV2G
The open source software OpenV2G contains a buffer overflow vulnerability that could allow an attacker to trigger a memory corruption. Siemens has released an update for the OpenV2G and recommends to update to the latest version.
-
Medium max 6.7SSA-637914 1 CVE
SSA-637914: Local Code Execution Vulnerability in Questa and ModelSim Before V2025.1
Questa and ModelSim (incl. OEM Editions) are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest ver…
-
High max 7.5SSA-615116 2 CVEs
SSA-615116: Multiple Vulnerabilities in Apogee PXC and Talon TC Devices
Apogee PXC and Talon TC contain a vulnerability that could allow an attacker to perform a denial of service using a out-of-bounds read forcing the device to enter a cold state and a vulnerability that would allow an attacker to decrypt the passwords of the de…
-
High max 7.5
SSA-349422: Denial of Service Vulnerability in Industrial Real-Time (IRT) Devices
A vulnerability in the affected products could allow an unauthorized attacker with network access to perform a denial-of-service attack resulting in loss of real-time synchronization. Siemens has released new versions for several affected products and recomme…
first Oct 8, 2019 -
High max 8.8SSA-342348 1 CVE
SSA-342348: Insufficient Session Expiration Vulnerability in Siemens Products
Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released …
-
High max 7.5SSA-224824 2 CVEs
SSA-224824: Denial of Service Vulnerabilities in SIMATIC S7-1200 CPU Family Before V4.7
SIMATIC S7-1200 CPU family before V4.7 is affected by two denial of service vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
-
High max 7.8
SSA-196737: Multiple Vulnerabilities in SINEC Traffic Analyzer Before V1.2
SINEC Traffic Analyzer before V1.2 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version.
first Jun 11, 2024