Most recent entries from csaf_siemens

SSA-627195 — SSA-627195: Zip Path Traversal Vulnerability in Mendix Studio Pro's Module Installation Process

Thu, 12 Jun 2025 00:00:00 +0000

Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-814963 — SSA-814963: Insecure Inherited Permission in Mendix (Revoked)

Tue, 14 Jul 2026 00:00:00 +0000

This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute.

SSA-823812 — SSA-823812: Denial of Service Vulnerability in WTV676 and WTV776 devices

Wed, 16 Sep 2026 00:00:00 +0000

The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-517424 — SSA-517424: Path Traversal Vulnerability in SIMOVE Fleetmanager and SIPLANT

Tue, 08 Sep 2026 00:00:00 +0000

SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-503852 — SSA-503852: Authentication Bypass Vulnerability in Industrial Edge Management

Tue, 08 Sep 2026 00:00:00 +0000

Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-434797 — SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens Products

Tue, 09 Jun 2026 00:00:00 +0000

OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution.

Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

SSA-331739 — SSA-331739: Privilege Escalation Vulnerability in WIBU CodeMeter Runtime Affecting Siemens Products

Tue, 12 Aug 2025 00:00:00 +0000

WIBU Systems published information about a privilege escalation vulnerability under a certain circumstances and associated fix releases of CodeMeter Runtime, a product provided by WIBU Systems and used in several Siemens industrial products.

Siemens has released new versions for the affected products and recommends to update to the latest versions.

SSA-330084 — SSA-330084: Client Code Execution Vulnerability in Desigo CC Product Family

Tue, 08 Sep 2026 00:00:00 +0000

A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lateral movement within the organization.

SSA-328642 — SSA-328642: "Copy Fail" Vulnerability in Multiple Industrial Products

Tue, 08 Sep 2026 00:00:00 +0000

Multiple Siemens products are vulnerable to the "Copy Fail" vulnerability.

SSA-327438 — SSA-327438: Multiple Vulnerabilities in SCALANCE LPE9403

Tue, 13 May 2025 00:00:00 +0000

SCALANCE LPE9403 is affected by multiple vulnerabilities which lead to a compromise in availability, integrity and confidentiality.

Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available.