Description
A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | SIMATIC Virtualization as a Service (SIVaaS) | — | — |
Advisories 3
- NCSC-2025-0274 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Sep 9, 2025
- ICSA-25-254-02 Siemens SIMATIC Virtualization as a Service (SIVaaS) CISA ICS & IT advisories · Sep 9, 2025
- SSA-534283 SSA-534283: Insecure File Share Vulnerability in SIMATIC Virtualization as a Service (SIVaaS) Siemens ProductCERT · Sep 9, 2025