Juli 2025
08.07.2025
SIEMENS CERT
SSA-725549 V1.1 (Last Update: 2025-07-08): Denial of Service of ICMP in Industrial Devices
Titel
SSA-725549 V1.1 (Last Update: 2025-07-08): Denial of Service of ICMP in Industrial Devices
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-725549.html
Text
A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through specially crafted ICMP packets. A successful attack will impact the availability ...
08.07.2025
SIEMENS CERT
SSA-634640 V1.1 (Last Update: 2025-07-08): Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Titel
SSA-634640 V1.1 (Last Update: 2025-07-08): Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-634640.html
Text
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for the affected products and recommends to update to the latest versions.
08.07.2025
SIEMENS CERT
SSA-627195 V1.1 (Last Update: 2025-07-08): Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process
Titel
SSA-627195 V1.1 (Last Update: 2025-07-08): Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-627195.html
Text
Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for the affected products and recommends to update to the latest versions.
08.07.2025
SIEMENS CERT
SSA-614723 V1.1 (Last Update: 2025-07-08): Denial of Service Vulnerabilities in User Management Component (UMC)
Titel
SSA-614723 V1.1 (Last Update: 2025-07-08): Denial of Service Vulnerabilities in User Management Component (UMC)
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-614723.html
Text
Siemens User Management Component (UMC) is affected by three vulnerabilities which could allow an unauthenticated remote attacker to cause a denial of service condition. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...
08.07.2025
SIEMENS CERT
SSA-593272 V2.5 (Last Update: 2025-07-08): SegmentSmack in Interniche IP-Stack based Industrial Devices
Titel
SSA-593272 V2.5 (Last Update: 2025-07-08): SegmentSmack in Interniche IP-Stack based Industrial Devices
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-593272.html
Text
A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The underlying TCP stack can be forced to make very computation expensive calls for every incoming packet which can lead to a Denial-of-Service. Siemens has released new versions for ...
08.07.2025
SIEMENS CERT
SSA-091753 V1.0: Multiple Vulnerabilities in Solid Edge Before SE2025 Update 5
Titel
SSA-091753 V1.0: Multiple Vulnerabilities in Solid Edge Before SE2025 Update 5
Veröffentlicht
8. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssa-091753.html
Text
Solid Edge is affected by multiple file parsing vulnerabilities that could be triggered when the application reads specially crafted files in various formats such as PAR or CFG format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released a new version for Solid ...
07.07.2025
SIEMENS CERT
SSB-104599 V1.0: Increasing Cyber Threats to Industrial Control Systems
Titel
SSB-104599 V1.0: Increasing Cyber Threats to Industrial Control Systems
Veröffentlicht
7. Juli 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssb-104599.html
Text
03.07.2025
US CERT (ICS)
Mitsubishi Electric MELSOFT Update Manager
Titel
Mitsubishi Electric MELSOFT Update Manager
Veröffentlicht
3. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSOFT Update Manager Vulnerabilities: Integer Underflow (Wrap or Wraparound), Protection Mechanism Failure 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, disclose information, alter information, or ...
03.07.2025
US CERT (ICS)
Hitachi Energy MicroSCADA X SYS600
Titel
Hitachi Energy MicroSCADA X SYS600
Veröffentlicht
3. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA X SYS600 Vulnerabilities: Incorrect Default Permissions, External Control of File Name or Path, Improper Validation of Integrity Check Value, Exposure of Sensitive Information Through Data Queries, Improper Certificate Validation 2. RISK EVALUATION ...
01.07.2025
US CERT (ICS)
FESTO Didactic CP, MPS 200, and MPS 400 Firmware
Titel
FESTO Didactic CP, MPS 200, and MPS 400 Firmware
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: FESTO Didactic Equipment: CP, MPS 200, MPS 400 Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write arbitrary data ...
01.07.2025
US CERT (ICS)
FESTO Automation Suite, FluidDraw, and Festo Didactic Products
Titel
FESTO Automation Suite, FluidDraw, and Festo Didactic Products
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: FESTO, FESTO Didactic Equipment: CIROS Studio / Education, Automation Suite, FluidDraw, FluidSIM, MES-PC Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to gain full control of the host system, ...
01.07.2025
US CERT (ICS)
Voltronic Power and PowerShield UPS Monitoring Software
Titel
Voltronic Power and PowerShield UPS Monitoring Software
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-05
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Voltronic Power, PowerShield Equipment: Viewpower, NetGuard Vulnerabilities: Exposed Dangerous Method or Function, Forced Browsing 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an unauthenticated attacker remotely to make configuration changes, resulting in shutting down ...
01.07.2025
US CERT (ICS)
Hitachi Energy Relion 670/650 and SAM600-IO Series
Titel
Hitachi Energy Relion 670/650 and SAM600-IO Series
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-06
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: Relion 670/650 and SAM600-IO Vulnerability: Allocation of Resources Without Limits or Throttling 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to cause a denial-of-service that disrupts critical functions in the ...
01.07.2025
US CERT (ICS)
FESTO Hardware Controller, Hardware Servo Press Kit
Titel
FESTO Hardware Controller, Hardware Servo Press Kit
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: FESTO Equipment: Hardware Controller, Hardware Servo Press Kit Vulnerabilities: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute ...
01.07.2025
US CERT (ICS)
FESTO CODESYS
Titel
FESTO CODESYS
Veröffentlicht
1. Juli 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-03
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: FESTO Equipment: CODESYS Vulnerabilities: Partial String Comparison, Uncontrolled Resource Consumption, Memory Allocation with Excessive Size Value 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to block legitimate user connections, crash the application, ...
Juni 2025
26.06.2025
US CERT (ICS)
TrendMakers Sight Bulb Pro
Titel
TrendMakers Sight Bulb Pro
Veröffentlicht
26. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.3 ATTENTION: Low attack complexity Vendor: TrendMakers Equipment: Sight Bulb Pro Vulnerabilities: Use of a Broken or Risky Cryptographic Algorithm, Improper Neutralization of Special Elements used in a Command ('Command Injection') 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker ...
24.06.2025
US CERT (ICS)
Kaleris Navis N4 Terminal Operating System
Titel
Kaleris Navis N4 Terminal Operating System
Veröffentlicht
24. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-01
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Kaleris Equipment: Navis N4 Vulnerabilities: Deserialization of Untrusted Data, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to remotely exploit the operating system, achieve remote code execution, ...
24.06.2025
US CERT (ICS)
MICROSENS NMP Web+
Titel
MICROSENS NMP Web+
Veröffentlicht
24. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-07
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: MICROSENS Equipment: NMP Web+ Vulnerabilities: Use of Hard-coded, Security-relevant Constants, Insufficient Session Expiration, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker ...
24.06.2025
US CERT (ICS)
ControlID iDSecure On-Premises
Titel
ControlID iDSecure On-Premises
Veröffentlicht
24. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: ControlID Equipment: iDSecure On-premises Vulnerabilities: Improper Authentication, Server-Side Request Forgery (SSRF), SQL Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication, retrieve information, leak arbitrary data, or perform SQL ...
24.06.2025
US CERT (ICS)
Parsons AccuWeather Widget
Titel
Parsons AccuWeather Widget
Veröffentlicht
24. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-06
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Parsons Equipment: AccuWeather and Custom RSS widget Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to insert a malicious link that users might access through the RSS feed. 3. ...
24.06.2025
US CERT (ICS)
Schneider Electric EVLink WallBox
Titel
Schneider Electric EVLink WallBox
Veröffentlicht
24. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: EVLink WallBox Vulnerabilities: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Neutralization of Special Elements used in an OS ...
24.06.2025
SIEMENS CERT
SSB-295699 V1.0: Configuration of Microsoft Defender Antivirus for SIMATIC PCS 7 and SIMATIC PCS neo
Titel
SSB-295699 V1.0: Configuration of Microsoft Defender Antivirus for SIMATIC PCS 7 and SIMATIC PCS neo
Veröffentlicht
24. Juni 2025 02:00
URL
https://cert-portal.siemens.com/productcert/html/ssb-295699.html
Text
17.06.2025
US CERT (ICS)
Dover Fueling Solutions ProGauge MagLink LX Consoles
Titel
Dover Fueling Solutions ProGauge MagLink LX Consoles
Veröffentlicht
17. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-05
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Dover Fueling Solutions Equipment: ProGauge MagLink LX consoles Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker gaining control of the monitoring device, manipulating fueling operations, ...
17.06.2025
US CERT (ICS)
Fuji Electric Smart Editor
Titel
Fuji Electric Smart Editor
Veröffentlicht
17. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-04
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: Fuji Electric Equipment: Smart Editor Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following ...
17.06.2025
US CERT (ICS)
LS Electric GMWin 4
Titel
LS Electric GMWin 4
Veröffentlicht
17. Juni 2025 14:00
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-02
Text
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.4 ATTENTION: Low attack complexity Vendor: LS Electric Equipment: GMWin 4 Vulnerabilities: Out-of-Bounds Write, Out-of-Bounds Read, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED ...

Letzte Updates

BOSCH PSIRT
10.06.2025
SIEMENS CERT
10.07.2025
US CERT
12.06.2025
US CERT (ICS)
10.07.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds