April 2021
13.04.2021
SIEMENS CERT
SSA-541017 V1.3 (Last Update: 2021-04-13): Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SEN...
Titel
SSA-541017 V1.3 (Last Update: 2021-04-13): Embedded TCP/IP Stack Vulnerabilities (AMNESIA:33) in SIRIUS 3RW5 Modbus TCP and SENTRON PAC / 3VA Devices
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-541017.pdf
Text
Security researchers discovered and disclosed 33 vulnerabilities in several open-source TCP/IP stacks for embedded devices, also known as “AMNESIA:33” vulnerabilities. This advisory describes the impact of one of these vulnerabilities (CVE-2020-13988) to Siemens products. Siemens has released updates for the affected products and recommends to update to the latest versions. ...
13.04.2021
SIEMENS CERT
SSA-591405 V1.2 (Last Update: 2021-04-13): Web Vulnerabilities in SCALANCE S-600 Family
Titel
SSA-591405 V1.2 (Last Update: 2021-04-13): Web Vulnerabilities in SCALANCE S-600 Family
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-591405.pdf
Text
The firmware for SCALANCE S-600 family devices contains multiple web vulnerabilities. The vulnerabilities could allow an remote attacker to conduct Denial-of-Service attacks or perform Cross-Site Scripting attacks. Siemens has released updates for the affected products and recommends to update to the latest versions, or to upgrade to a successor product.
13.04.2021
SIEMENS CERT
SSA-646763 V1.2 (Last Update: 2021-04-13): DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices
Titel
SSA-646763 V1.2 (Last Update: 2021-04-13): DNSpooq - Dnsmasq Vulnerabilities in SCALANCE and RUGGEDCOM Devices
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-646763.pdf
Text
Security researchers discovered and disclosed seven vulnerabilities in the open-source DNS component “dnsmasq”, also known as “DNSpooq” vulnerabilities (CVE-2020-25681 through CVE-2020-25687). Three vulnerabilities (CVE-2020-25684 through CVE-2020-25686) affect the validation of DNS responses and impact several SCALANCE and RUGGEDCOM devices as listed below. Siemens has released updates for several affected products ...
13.04.2021
SIEMENS CERT
SSA-689942 V1.3 (Last Update: 2021-04-13): Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Pro...
Titel
SSA-689942 V1.3 (Last Update: 2021-04-13): Denial-of-Service and DLL Hijacking Vulnerabilities in Multiple SIMATIC Software Products
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-689942.pdf
Text
Multiple SIMATIC Software products are affected by two vulnerabilities that could allow an attacker to manipulate project files that may lead to Remote Code Execution or Denial-of-Service attacks. Siemens has released updates to some of the affected products and recommends that customers update to the latest version. Siemens is preparing ...
13.04.2021
SIEMENS CERT
SSA-715184 V1.1 (Last Update: 2021-04-13): Multiple File Parsing Vulnerabilities in Solid Edge
Titel
SSA-715184 V1.1 (Last Update: 2021-04-13): Multiple File Parsing Vulnerabilities in Solid Edge
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf
Text
Siemens has released new versions for Solid Edge to fix multiple vulnerabilities that could be triggered when the application reads files in different file formats (PAR, DFT, XML extensions). If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and ...
13.04.2021
SIEMENS CERT
SSA-841348 V1.7 (Last Update: 2021-04-13): Multiple Vulnerabilities in the UMC Stack
Titel
SSA-841348 V1.7 (Last Update: 2021-04-13): Multiple Vulnerabilities in the UMC Stack
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-841348.pdf
Text
The latest update for the below listed products fixes two security vulnerabilities that could allow an attacker to cause a partial Denial-of-Service on the UMC component of the affected devices under certain circumstances, and one vulnerability that could allow an attacker to locally escalate privileges from a user with administrative ...
13.04.2021
SIEMENS CERT
SSA-844761 V1.1 (Last Update: 2021-04-13): Multiple Vulnerabilities in SiNVR/SiVMS Video Server
Titel
SSA-844761 V1.1 (Last Update: 2021-04-13): Multiple Vulnerabilities in SiNVR/SiVMS Video Server
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-844761.pdf
Text
The Video Server application in SiNVR/SiVMS solutions contains five vulnerabilities involving information disclosure (CVE-2019-19291, CVE-2019-19299), path traversal (CVE-2019-19296, CVE-2019-19297), and denial-of-service (CVE-2019-19298). PKE has released an update of the application that fixes the reported vulnerabilities, except for CVE-2019-19298 and CVE-2019-19299. This update is not available under the former Siemens OEM ...
13.04.2021
SIEMENS CERT
SSA-951513 V1.2 (Last Update: 2021-04-13): Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, and X-200 Switch...
Titel
SSA-951513 V1.2 (Last Update: 2021-04-13): Clickjacking Vulnerability in SCALANCE S, SCALANCE X-300, X-200IRT, and X-200 Switch Families
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-951513.pdf
Text
Several SCALANCE X switches contain a vulnerability that could allow an attacker to perform administrative actions if the victim is tricked into clicking on a website controlled by the attacker. The attack only works if the victim has an authenticated session on the administrative interface of the switch. Siemens has ...
13.04.2021
SIEMENS CERT
SSA-978220 V1.4 (Last Update: 2021-04-13): Denial-of-Service Vulnerability over SNMP in Multiple Industrial Products
Titel
SSA-978220 V1.4 (Last Update: 2021-04-13): Denial-of-Service Vulnerability over SNMP in Multiple Industrial Products
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-978220.pdf
Text
Several industrial products are affected by a vulnerability that could allow remote attackers to conduct a Denial-of-Service (DoS) attack by sending specially crafted packets to port 161/udp (SNMP). Siemens has released updates for several affected products and recommends to update to the new versions. Siemens is preparing further updates and ...
13.04.2021
SIEMENS CERT
SSA-979775 V1.1 (Last Update: 2021-04-13): Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Titel
SSA-979775 V1.1 (Last Update: 2021-04-13): Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf
Text
Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the affected devices. Siemens has released updates for the affected products ...
13.04.2021
SIEMENS CERT
SSA-296266 V1.1 (Last Update: 2021-04-13): Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices
Titel
SSA-296266 V1.1 (Last Update: 2021-04-13): Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf
Text
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released updates for the affected products and recommends to update to the latest version.
13.04.2021
SIEMENS CERT
SSB-439005 V3.3 (Last Update: 2021-04-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...
Titel
SSB-439005 V3.3 (Last Update: 2021-04-13): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf
Text
13.04.2021
SIEMENS CERT
SSA-761617 V1.1 (Last Update: 2021-04-13): Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Vide...
Titel
SSA-761617 V1.1 (Last Update: 2021-04-13): Authentication Bypass and Information Disclosure Vulnerabilities in SiNVR/SiVMS Video Server
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf
Text
The Video Server application in SiNVR/SiVMS solutions contains two vulnerabilities involving authentication bypass (CVE-2019-18339) and information disclosure (CVE-2019-18340). PKE has released an update of the application that fixes CVE-2019-18339. This update is not available under the former Siemens OEM brand name SiNVR. For details see PKE Security Advisory at https://sivms.cloud/wp-content/uploads/2021/03/sivms-cve-fixes_1.0_EN.pdf ...
13.04.2021
SIEMENS CERT
SSA-163226 V1.0: CELL File Parsing Vulnerability in Tecnomatix RobotExpert
Titel
SSA-163226 V1.0: CELL File Parsing Vulnerability in Tecnomatix RobotExpert
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf
Text
Siemens Tecnomatix RobotExpert version V16.1 fixes a vulnerability that could be triggered when the application reads CELL files. If a user is tricked to open a malicious file with the affected application, this could lead to a crash, and potentially also to arbitrary code execution or data extraction on the ...
13.04.2021
SIEMENS CERT
SSA-763427 V1.5 (Last Update: 2021-04-13): Authentication Bypass Vulnerability in SIMATIC NET CP Modules and TIM Devices
Titel
SSA-763427 V1.5 (Last Update: 2021-04-13): Authentication Bypass Vulnerability in SIMATIC NET CP Modules and TIM Devices
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-763427.pdf
Text
Siemens has released updates for Communication Processor (CP) module families CP 343-1/TIM 3V-IE/TIM 4R-IE/CP 443-1 to resolve an authentication bypass vulnerability that could allow unauthenticated users to perform administrative operations under certain conditions. 2021-04-13: Siemens has also added Profibus devices (CP 342-5 / CP 443-5) to this advisory. For these ...
13.04.2021
SIEMENS CERT
SSA-455843 V1.6 (Last Update: 2021-04-13): WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens and Siemens Energy Products
Titel
SSA-455843 V1.6 (Last Update: 2021-04-13): WIBU Systems CodeMeter Runtime Vulnerabilities in Siemens and Siemens Energy Products
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-455843.pdf
Text
CISA and WIBU Systems disclosed six vulnerabilities in different versions of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens and Siemens Energy products for license management. The vulnerabilities are described in the section “Vulnerability Classification” below and got assigned the CVE IDs CVE-2020-14509, CVE-2020-14513, CVE-2020-14515, ...
13.04.2021
SIEMENS CERT
SSA-788287 V1.0: Disclosure of Private Data
Titel
SSA-788287 V1.0: Disclosure of Private Data
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf
Text
Due to SmartClient Installation technology (ClickOnce) a customer/integrator needs to create a customer specific Smartclient installer. The mentioned products delivered a trusted but yet expired codesigning certificate. An attacker could have exploited the vulnerability by spoofing the code-signing certificate and signing a malicious executable resulting in having a trusted digital ...
13.04.2021
SIEMENS CERT
SSA-761844 V1.0: Multiple Vulnerabilities in Control Center Server (CCS)
Titel
SSA-761844 V1.0: Multiple Vulnerabilities in Control Center Server (CCS)
Veröffentlicht
13. April 2021 02:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-761844.pdf
Text
The advisory informs about multiple vulnerabilities in the Central Control Server (CCS) application, as initially reported in SSA-761617 on 2019-12-10 and SSA-844761 on 2020-03-10. The vulnerabilities involve authentication bypass (CVE-2019-18337, CVE-2019-18341), path traversal (CVE-2019-18338, CVE-2019-19290), information disclosure (CVE-2019-13947, CVE-2019-18340, CVE-2019-19291), privilege escalation (CVE-2019-18342), SQL injection (CVE-2019-19292), cross-site scripting (CVE-2019-19293, CVE-2019-19294), ...
März 2021
09.03.2021
SIEMENS CERT
SSA-256092 V1.0: Multiple local Denial-of-Service Vulnerabilities in SIMATIC S7-PLCSIM V5.4
Titel
SSA-256092 V1.0: Multiple local Denial-of-Service Vulnerabilities in SIMATIC S7-PLCSIM V5.4
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
Text
Multiple vulnerabilities affecting SIMATIC S7-PLCSIM V5.4 could allow an attacker with local access to the system to craft special project files that may lead to denial-of-service attacks. Siemens recommends specific workarounds and mitigations.
09.03.2021
SIEMENS CERT
SSA-231216 V1.0: Luxion KeyShot Vulnerabilities in Solid Edge
Titel
SSA-231216 V1.0: Luxion KeyShot Vulnerabilities in Solid Edge
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf
Text
The Solid Edge installation package includes a specific version of the third-party product KeyShot from Luxion, which may not contain the latest security fixes provided by Luxion. Siemens recommends to update KeyShot according to the information in the Luxion Security Advisory LSA-192169.
09.03.2021
SIEMENS CERT
SSA-296266 V1.0: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices
Titel
SSA-296266 V1.0: Denial-of-Service Vulnerability in SCALANCE and RUGGEDCOM Devices
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf
Text
Some firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the SSH authentication that could allow an attacker to cause a Denial-of-Service under certain conditions. Siemens has released an update for the SCALANCE SC-600 family and recommends to update to the latest version. ...
09.03.2021
SIEMENS CERT
SSA-293562 V3.1 (Last Update: 2021-03-09): Vulnerabilities in Industrial Products
Titel
SSA-293562 V3.1 (Last Update: 2021-03-09): Vulnerabilities in Industrial Products
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-293562.pdf
Text
Several industrial devices are affected by two vulnerabilities that could allow an attacker to cause a Denial-of-Service condition via PROFINET DCP network packets under certain circumstances. The precondition for this scenario is a direct layer 2 access to the affected products. PROFIBUS interfaces are not affected. Siemens has released updates ...
09.03.2021
SIEMENS CERT
SSA-979775 V1.0: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Titel
SSA-979775 V1.0: Stack Overflow Vulnerability in SCALANCE and RUGGEDCOM Devices
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf
Text
Several firmware versions of the SCALANCE and RUGGEDCOM devices listed below are affected by a vulnerability in the passive listening feature that could allow an attacker to cause a reboot or, under specific circumstances, attain remote code execution of the affected devices. Siemens has released updates for several affected products ...
09.03.2021
SIEMENS CERT
SSA-936080 V1.0: Multiple Vulnerabilities in Third-Party Component libcurl
Titel
SSA-936080 V1.0: Multiple Vulnerabilities in Third-Party Component libcurl
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-936080.pdf
Text
SIMATIC NET CM 1542-1 and SCALANCE SC600 family devices are vulnerable to a vulnerability in the third party component libcurl that could allow an attacker to cause a Denial-of-Service condition on the affected devices. Siemens has released an update for SCALANCE SC600. For the remaining affected product, Siemens is preparing ...
09.03.2021
SIEMENS CERT
SSA-917115 V1.0: Mendix Forgot Password Appstore module
Titel
SSA-917115 V1.0: Mendix Forgot Password Appstore module
Veröffentlicht
9. März 2021 01:00
URL
https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf
Text
Mendix Forgot Password Appstore module contains a vulnerability that could allow authorized users to take over accounts. Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.

Letzte Updates

BOSCH PSIRT
10.06.2025
SIEMENS CERT
24.06.2025
US CERT
12.06.2025
US CERT (ICS)
03.07.2025

Nach Quelle

Archiv

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds