https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:51:54 +0000 https://cve.radiocsirt.org/vuln/ssa-823812 <p>The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-823812 Wed, 16 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-517424 <p>SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>SIMOVE Fleetmanager and SIPLANT contain a path traversal vulnerability that could allow an attacker to access files outside of intended scope.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-517424 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-503852 <p>Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>Industrial Edge Management contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to perform full account takeover by resetting user credentials without completing email verification.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-503852 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-330084 <p>A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lateral movement within the organization.</p> <p>A Client Code Execution (CCE) vulnerability has been identified in Desigo CC, potentially allowing malicious actors to execute arbitrary code on client devices through specially crafted graphics documents. This vulnerability leverages user-defined graphics containing embedded scripts that are executed on client application instances. Successful exploitation could lead to compromise of the client operating system and potential lateral movement within the organization.</p> https://cve.radiocsirt.org/vuln/ssa-330084 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-328642 <p>Multiple Siemens products are vulnerable to the &#34;Copy Fail&#34; vulnerability.</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> <p>Multiple Siemens products are vulnerable to the &#34;Copy Fail&#34; vulnerability.</p> <p>Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.</p> https://cve.radiocsirt.org/vuln/ssa-328642 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-254516 <p>A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access on the OIS server.</p> <p>Siemens has released patches and updates for Siveillance OIS to apply to the products that incorporate the OIS service, and recommends to update to the latest versions.</p> <p>A vulnerability has been identified in the Open Interface Services (OIS) web module affecting Siveillance Control and Siveillance Control Pro (versions OIS 3.x.y and OIS 4.x.y) . This vulnerability allows an attacker to upload arbitrary files, which can lead to unauthorized root-level access on the OIS server.</p> <p>Siemens has released patches and updates for Siveillance OIS to apply to the products that incorporate the OIS service, and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-254516 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-157465 <p>A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user&#39;s session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim&#39;s Teamcenter session.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user&#39;s session by crafting a malicious URL. Successful exploitation may enable the attacker to read data or perform actions within the victim&#39;s Teamcenter session.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-157465 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-142885 <p>Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities.</p> <p>Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.</p> <p>Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities.</p> <p>Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-142885 Tue, 08 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-887643 <p>Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations.</p> <p>Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.</p> <p>Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations.</p> <p>Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-887643 Thu, 03 Sep 2026 00:00:00 +0000 https://cve.radiocsirt.org/vuln/ssa-682041 <p>The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim&#39;s browser session. This vulnerability affects only the @siemens/maps-ng package.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> <p>The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim&#39;s browser session. This vulnerability affects only the @siemens/maps-ng package.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p> https://cve.radiocsirt.org/vuln/ssa-682041 Thu, 27 Aug 2026 00:00:00 +0000