Tuesday, 26.08.2025
14:00
US CERT (ICS)
Schneider Electric Modicon M340 Controller and Communication Modules
Title
Schneider Electric Modicon M340 Controller and Communication Modules
Published
Aug. 26, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-238-03
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Modicon M340 and Communication Modules Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS Schneider ...
14:00
US CERT (ICS)
INVT VT-Designer and HMITool
Title
INVT VT-Designer and HMITool
Published
Aug. 26, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-238-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: INVT Equipment: VT-Designer and HMITool Vulnerabilities: Out-of-bounds Write, Access of Resource Using Incompatible Type ('Type Confusion') 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers to execute arbitrary code in the context of the current ...
02:00
SIEMENS CERT
SSA-707630 V1.1 (Last Update: 2025-08-26): Multiple Vulnerabilities in SIMATIC RTLS Locating Manager Before V3.3
Title
SSA-707630 V1.1 (Last Update: 2025-08-26): Multiple Vulnerabilities in SIMATIC RTLS Locating Manager Before V3.3
Published
Aug. 26, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-707630.html
Summary
Siemens has released a new version for SIMATIC RTLS Locating Manager and recommends to update to the latest version.
Monday, 25.08.2025
15:36
US CERT
Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System
Title
Countering Chinese State-Sponsored Actors Compromise of Networks Worldwide to Feed Global Espionage System
Published
Aug. 25, 2025, 3:36 p.m.
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-239a
Summary
Executive summary People’s Republic of China (PRC) state-sponsored cyber threat actors are targeting networks globally, including, but not limited to, telecommunications, government, transportation, lodging, and military infrastructure networks. While these actors focus on large backbone routers of major telecommunications providers, as well as provider edge (PE) and customer edge (CE) ...
Thursday, 21.08.2025
14:00
US CERT (ICS)
Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module
Title
Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module
Published
Aug. 21, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-233-01
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Mitsubishi Electric Corporation Equipment: MELSEC iQ-F Series CPU module Vulnerability: Improper Handling of Length Parameter Inconsistency 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a remote attacker being able to delay the processing ...
Tuesday, 19.08.2025
14:00
US CERT (ICS)
Siemens Desigo CC Product Family and SENTRON Powermanager
Title
Siemens Desigo CC Product Family and SENTRON Powermanager
Published
Aug. 19, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-231-01
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
02:00
SIEMENS CERT
SSA-201595 V1.1 (Last Update: 2025-08-19): Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC...
Title
SSA-201595 V1.1 (Last Update: 2025-08-19): Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting the Desigo CC Product Family and SENTRON Powermanager
Published
Aug. 19, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-201595.html
Summary
Versions V5.0 through V8 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could allow privilege ...
Monday, 18.08.2025
02:00
SIEMENS CERT
SSA-711309 V2.4 (Last Update: 2025-08-18): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products
Title
SSA-711309 V2.4 (Last Update: 2025-08-18): Denial of Service Vulnerability in the OPC UA Implementations of SIMATIC Products
Published
Aug. 18, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-711309.html
Summary
The OPC UA implementations (ANSI C and C++) as used in several SIMATIC products contain a denial of service vulnerability that could allow an unauthenticated remote attacker to create a denial of service condition by sending a specially crafted certificate. Siemens has released new versions for several affected products and ...
Thursday, 14.08.2025
14:00
US CERT (ICS)
Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER
Title
Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-18
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Rockwell Automation ControlLogix Ethernet Modules
Title
Rockwell Automation ControlLogix Ethernet Modules
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-28
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ControlLogix Ethernet Modules Vulnerability: Initialization of a Resource with an Insecure Default 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution ...
14:00
US CERT (ICS)
Rockwell Automation ArmorBlock 5000 I/O - Webserver
Title
Rockwell Automation ArmorBlock 5000 I/O - Webserver
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-27
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ArmorBlock 5000 I/O Vulnerabilities: Incorrect Authorization, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to predict session numbers or perform privileged actions. 3. TECHNICAL DETAILS 3.1 AFFECTED ...
14:00
US CERT (ICS)
Siemens SINEC OS
Title
Siemens SINEC OS
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Rockwell Automation FLEX 5000 I/O
Title
Rockwell Automation FLEX 5000 I/O
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-26
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Rockwell Automation Equipment: FLEX 5000 I/O Vulnerabilities: Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could create a denial-of-service condition. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following version of FLEX 5000 I/O ...
14:00
US CERT (ICS)
Rockwell Automation Micro800
Title
Rockwell Automation Micro800
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-25
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: Micro800 Vulnerabilities: Dependency on Vulnerable Third-Party Component, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution or may lead to privilege escalation. 3. TECHNICAL DETAILS ...
14:00
US CERT (ICS)
Siemens Web Installer
Title
Siemens Web Installer
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-22
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens BFCClient
Title
Siemens BFCClient
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-21
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens SICAM Q100/Q200
Title
Siemens SICAM Q100/Q200
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-16
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Rockwell Automation FactoryTalk Action Manager
Title
Rockwell Automation FactoryTalk Action Manager
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-30
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Action Manager Vulnerability: Exposure of Sensitive Information to an Unauthorized Actor 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device. ...
14:00
US CERT (ICS)
Siemens SIPROTEC 4 and SIPROTEC 4 Compact
Title
Siemens SIPROTEC 4 and SIPROTEC 4 Compact
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-12
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Rockwell Automation FactoryTalk Viewpoint
Title
Rockwell Automation FactoryTalk Viewpoint
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-23
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: FactoryTalk Viewpoint Vulnerability: Improper Handling of Insufficient Permissions or Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could result in full privilege escalation. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following version of ...
14:00
US CERT (ICS)
Siemens SIMATIC RTLS Locating Manager
Title
Siemens SIMATIC RTLS Locating Manager
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-01
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Wibu CodeMeter Runtime
Title
Siemens Wibu CodeMeter Runtime
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-05
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT
Title
Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-31
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 7.1 ATTENTION: Low attack complexity Vendor: Rockwell Automation Equipment: 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT Vulnerabilities: Improper Input Validation, Improper Handling of Exceptional Conditions 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition. 3. TECHNICAL DETAILS ...
14:00
US CERT (ICS)
Siemens Opcenter Quality
Title
Siemens Opcenter Quality
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-06
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Third-Party Components in SINEC OS
Title
Siemens Third-Party Components in SINEC OS
Published
Aug. 14, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...

Last Updates

BOSCH PSIRT
14.08.2025
SIEMENS CERT
26.08.2025
US CERT
25.08.2025
US CERT (ICS)
26.08.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds