Most recent entries from csaf_siemens

SSA-627195 — SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process

2026-09-28T00:00:00+00:00

Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-814963 — SSA-814963: Insecure Inherited Permission in Mendix (Revoked)

2026-09-22T00:00:00+00:00

This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute.

SSA-823812 — SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices

2026-09-16T00:00:00+00:00

The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-517424 — SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT

2026-09-08T00:00:00+00:00

SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-503852 — SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Management

2026-09-08T00:00:00+00:00

Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-434797 — SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens Products

2026-09-08T00:00:00+00:00

OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-331739 — SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products

2026-09-08T00:00:00+00:00

WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-330084 — SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family

2026-09-08T00:00:00+00:00

A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lateral movement within the organization.

SSA-328642 — SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products

2026-09-08T00:00:00+00:00

Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability.

SSA-327438 — SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403

2026-09-08T00:00:00+00:00

SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality.

Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.