March 2025
11.03.2025
SIEMENS CERT
SSA-398330 V2.4 (Last Update: 2025-03-11): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 151...
Title
SSA-398330 V2.4 (Last Update: 2025-03-11): Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
Published
March 11, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Summary
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). These GNU/Linux vulnerabilities have been externally identified. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not ...
11.03.2025
SIEMENS CERT
SSA-832273 V1.7 (Last Update: 2025-03-11): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices
Title
SSA-832273 V1.7 (Last Update: 2025-03-11): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.3 on RUGGEDCOM APE1808 Devices
Published
March 11, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-832273.html
Summary
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.
04.03.2025
US CERT (ICS)
GMOD Apollo
Title
GMOD Apollo
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: GMOD Equipment: Apollo Vulnerabilities: Incorrect Privilege Assignment, Relative Path Traversal, Missing Authentication for Critical Function, Generation of Error Message Containing Sensitive Information 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to escalate ...
04.03.2025
US CERT (ICS)
Keysight Ixia Vision Product Family
Title
Keysight Ixia Vision Product Family
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Keysight Equipment: Ixia Vision Product Family Vulnerabilities: Path Traversal, Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow ...
04.03.2025
US CERT (ICS)
Hitachi Energy XMC20
Title
Hitachi Energy XMC20
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: XMC20 Vulnerability: Relative Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access files or directories outside the authorized scope. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Hitachi ...
04.03.2025
US CERT (ICS)
Edimax IC-7100 IP Camera
Title
Edimax IC-7100 IP Camera
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-08
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Edimax Equipment: IC-7100 IP Camera Vulnerability: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send ...
04.03.2025
US CERT (ICS)
Hitachi Energy MACH PS700
Title
Hitachi Energy MACH PS700
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Vendor: Hitachi Energy Equipment: MACH PS700 Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and gain control over the software. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Hitachi Energy reports ...
04.03.2025
US CERT (ICS)
Hitachi Energy UNEM/ECST
Title
Hitachi Energy UNEM/ECST
Published
March 4, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-05
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.8 ATTENTION: Low Attack Complexity Vendor: Hitachi Energy Equipment: XMC20, ECST, UNEM Vulnerability: Improper Validation of Certificate with Host Mismatch 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to intercept or falsify data exchanges between the client and the server. ...
February 2025
27.02.2025
US CERT (ICS)
Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers
Title
Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers
Published
Feb. 27, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-058-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Communication modules for Modicon M580 and Quantum controllers Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a stack overflow attack, which could result in loss of confidentiality, integrity, ...
25.02.2025
US CERT (ICS)
Rockwell Automation PowerFlex 755
Title
Rockwell Automation PowerFlex 755
Published
Feb. 25, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-056-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Rockwell Automation Equipment: PowerFlex 755 Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could result in exposure of sensitive data. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following version of ...
25.02.2025
SIEMENS CERT
SSA-656895 V1.1 (Last Update: 2025-02-25): Open Redirect Vulnerability in Teamcenter
Title
SSA-656895 V1.1 (Last Update: 2025-02-25): Open Redirect Vulnerability in Teamcenter
Published
Feb. 25, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-656895.html
Summary
The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
20.02.2025
US CERT (ICS)
Carrier Block Load
Title
Carrier Block Load
Published
Feb. 20, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Carrier Equipment: Block Load Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges . 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS ...
20.02.2025
US CERT (ICS)
Elseta Vinci Protocol Analyzer
Title
Elseta Vinci Protocol Analyzer
Published
Feb. 20, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Elseta Equipment: Vinci Protocol Analyzer Vulnerability: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform ...
20.02.2025
US CERT (ICS)
ABB ASPECT-Enterprise, NEXUS, and MATRIX Series
Title
ABB ASPECT-Enterprise, NEXUS, and MATRIX Series
Published
Feb. 20, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: ASPECT-Enterprise, NEXUS, and MATRIX series Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain access to devices without proper authentication. 3. TECHNICAL DETAILS 3.1 ...
20.02.2025
US CERT (ICS)
Rapid Response Monitoring My Security Account App
Title
Rapid Response Monitoring My Security Account App
Published
Feb. 20, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-05
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rapid Response Monitoring Equipment: My Security Account App Vulnerability: Authorization Bypass Through User-Controlled Key 2. RISK EVALUATION Successful exploitation of this vulnerability could allow attacker to access sensitive information of other users. 3. TECHNICAL DETAILS 3.1 ...
20.02.2025
US CERT (ICS)
ABB FLXEON Controllers
Title
ABB FLXEON Controllers
Published
Feb. 20, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-02
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: FLXEON Controllers Vulnerabilities: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion'), Missing Origin Validation in WebSockets, Insertion of Sensitive Information into Log File 2. RISK EVALUATION Successful exploitation ...
19.02.2025
US CERT
#StopRansomware: Ghost (Cring) Ransomware
Title
#StopRansomware: Ghost (Cring) Ransomware
Published
Feb. 19, 2025, 5:38 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-050a
Summary
Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect ...
19.02.2025
SIEMENS CERT
SSA-354569 V1.2 (Last Update: 2025-02-19): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
Title
SSA-354569 V1.2 (Last Update: 2025-02-19): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
Published
Feb. 19, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-354569.html
Summary
Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available. [1] https://security.paloaltonetworks.com/
17.02.2025
SIEMENS CERT
SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated
Title
SSA-992434 V1.0: Directory Traversal Vulnerability in Third-Party Component in SiPass integrated
Published
Feb. 17, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-992434.html
Summary
SiPass integrated is affected by a directory traversal vulnerability in the third-party component DotNetZip. The vulnerability could allow an attacker to execute arbitrary code on the application server, if a specially crafted backup set is used for a restore. Siemens has released a new version for SiPass integrated and recommends ...
14.02.2025
SIEMENS CERT
SSA-246355 V1.1 (Last Update: 2025-02-14): Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence
Title
SSA-246355 V1.1 (Last Update: 2025-02-14): Multiple Vulnerabilities in Tableau Server Component of Opcenter Intelligence
Published
Feb. 14, 2025, 1 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-246355.html
Summary
The Tableau Server component in Opcenter Intelligence contains multiple vulnerabilities as described below. Siemens has released a new version for Opcenter Intelligence and recommends to update to the latest version and to install the latest available version of Tableau Server as described in https://support.sw.siemens.com/knowledge-base/PL8822108.
13.02.2025
US CERT (ICS)
Dingtian DT-R0 Series
Title
Dingtian DT-R0 Series
Published
Feb. 13, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-18
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dingtian Equipment: DT-R0 Series Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to modify the device settings and gain administrator access. 3. ...
13.02.2025
US CERT (ICS)
Siemens SIMATIC PCS neo and TIA Administrator
Title
Siemens SIMATIC PCS neo and TIA Administrator
Published
Feb. 13, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-13
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
13.02.2025
US CERT (ICS)
Siemens Opcenter Intelligence
Title
Siemens Opcenter Intelligence
Published
Feb. 13, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-14
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
13.02.2025
US CERT (ICS)
Siemens SIPROTEC 5
Title
Siemens SIPROTEC 5
Published
Feb. 13, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-03
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
13.02.2025
US CERT (ICS)
Siemens SCALANCE W700
Title
Siemens SCALANCE W700
Published
Feb. 13, 2025, 1 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Last Updates

BOSCH PSIRT
14.08.2025
SIEMENS CERT
26.08.2025
US CERT
25.08.2025
US CERT (ICS)
04.09.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds