SIEMENS CERT
03/08/2022
SSA-669737 V1.1 (Last Update: 2022-03-08): Improper Access Control Vulnerability in SICAM TOOLBOX II
SICAM TOOLBOX II contains a vulnerability that could allow an attacker access through a circumventable access control. Siemens is preparing updates and recommends countermeasures for products where updates are not, or not yet available.
SIEMENS CERT
03/08/2022
Siemens has released updates for Solid Edge and Teamcenter Visualization to fix multiple file parsing vulnerabilities. If a user is tricked to open a malicious file (crafted as PDF, DXF or PAR) with any of the affected products, this could lead the application to crash or potentially lead to arbitrary …
SIEMENS CERT
03/08/2022
71 vulnerabilities in third-party components as Node.js, cURL, SQLite, CivetWeb and DNS(ISC BIND) could allow an attacker to interfere with the affected product in various ways. Siemens has released an update for SINEC INS and recommends to update to the latest versions.
SIEMENS CERT
03/08/2022
A vulnerability in the RUGGEDCOM ROX devices’ third party component, ISC DHCP, could allow an attacker to cause a buffer overrun due to a bug when reading a stored DHCP lease containing certain option information, eventually leading to a denial-of-service condition, or cause a remote-code execution. Siemens has released updates …
SIEMENS CERT
03/08/2022
A vulnerability in Mendix Studio Pro was discovered, that, if acted upon by a malicious user, could allow to retrieve the status of a job run by another user in certain cases. Mendix has released updates for the affected product lines, recommends to update to the latest versions and to …
SIEMENS CERT
03/08/2022
An attacker could trigger malicious actions via a cross-site scripting vulnerability by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Polarion Subversion Webclient and recommends to update to the latest version.
SIEMENS CERT
03/08/2022
There is an insecure cryptographic vulnerability for the affected RUGGEDCOM devices. If an attacker were to exploit this, they could gain privileged functions. See auto-generated summary suggestion from build
SIEMENS CERT
03/08/2022
Multiple vulnerabilities were found in SIMATIC WinCC that ultimately could allow local or remote attackers to escalate privileges and read, write or delete critical files. Siemens has released updates for several affected products and recommends to update to the latest versions. Siemens is preparing further updates and recommends specific countermeasures …