ByteOS

SiPass integrated AC5102 (ACC-G2)

Product

Default Status

unknown

Versions

Affected

From 0 before V6.4.9 (custom)

Vendor

Product

SiPass integrated ACC-AP

Default Status

unknown

Versions

Affected

From 0 before V6.4.9 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-20	CWE-20: Improper Input Validation

Type: CWE

CWE ID: CWE-20

Description: CWE-20: Improper Input Validation

Metrics

Version	Base score	Base severity	Vector
3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
4.0	9.4	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Version: 4.0

Base score: 9.4

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

Hyperlink	Resource
https://cert-portal.siemens.com/productcert/html/ssa-515903.html	N/A

Hyperlink: https://cert-portal.siemens.com/productcert/html/ssa-515903.html

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:productcert@siemens.com

Published At:11 Mar, 2025 | 10:15

Updated At:22 Aug, 2025 | 17:49

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	9.4	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Primary	3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 4.0

Base score: 9.4

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Secondary

Version: 3.1

Base score: 9.1

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:siemens:sipass_integrated_ac5102_\(acc-g2\)_firmware:*:*:*:*:*:*:*:*

>>sipass_integrated_ac5102_\(acc-g2\)_firmware>>Versions before 6.4.9(exclusive)

cpe:2.3:h:siemens:sipass_integrated_ac5102_\(acc-g2\):-:*:*:*:*:*:*:*

>>sipass_integrated_ac5102_\(acc-g2\)>>-

cpe:2.3:o:siemens:sipass_integrated_acc-ap_firmware:*:*:*:*:*:*:*:*

>>sipass_integrated_acc-ap_firmware>>Versions before 6.4.9(exclusive)

cpe:2.3:h:siemens:sipass_integrated_acc-ap:-:*:*:*:*:*:*:*

>>sipass_integrated_acc-ap>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	productcert@siemens.com
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: productcert@siemens.com

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/html/ssa-515903.html	productcert@siemens.com	Vendor Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/html/ssa-515903.html

Source: productcert@siemens.com

Resource:

Vendor Advisory

Similar CVEs

333Records found

CVE-2023-49692

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-0.14% / 34.00%

7 Day CHG~0.00%

Published-12 Dec, 2023 | 11:27

Updated-13 Aug, 2024 | 07:53

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V7.2.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V7.2.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V7.2.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V7.2.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V7.2.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V7.2.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V7.2.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V7.2.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V7.2.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V7.2.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V7.2.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V7.2.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V7.2.2). An Improper Neutralization of Special Elements used in an OS Command with root privileges vulnerability exists in the parsing of the IPSEC configuration. This could allow malicious local administrators to issue commands on system level after a new connection is established.

Vendor-Siemens AG

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2020-24635

Matching Score-8

Matching Score-8

CVSS Score-7.2||HIGH

EPSS-5.12% / 89.45%

7 Day CHG~0.00%

Published-29 Mar, 2021 | 19:05

Updated-04 Aug, 2024 | 15:19

A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Product-scalance_w1750d_firmware instant scalance_w1750d Aruba Instant Access Points

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2023-36750

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.82% / 73.45%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 09:07

Updated-26 Nov, 2024 | 18:40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The software-upgrade Url parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2023-36753

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.82% / 73.45%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 09:07

Updated-02 Dec, 2024 | 18:56

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The uninstall-app App-name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2023-36751

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.82% / 73.45%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 09:07

Updated-26 Nov, 2024 | 16:42

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The install-app URL parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2023-36755

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.71% / 71.21%

7 Day CHG~0.00%

Published-11 Jul, 2023 | 09:07

Updated-19 Nov, 2024 | 16:30

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0). The SCEP CA Certificate Name parameter in the web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2023-33919

Matching Score-8

Assigner-Siemens

Product-cpci85_firmware cp-8031_master_module cp-8050_master_module CP-8031 MASTER MODULE CP-8050 MASTER MODULE cp-8031_master_module cp-8050_master_module

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-9.80% / 92.66%

7 Day CHG~0.00%

Published-13 Jun, 2023 | 08:17

Updated-13 Feb, 2025 | 16:55

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2021-37732

Matching Score-8

Matching Score-8

CVSS Score-7.2||HIGH

EPSS-2.70% / 85.31%

7 Day CHG~0.00%

Published-12 Oct, 2021 | 15:12

Updated-04 Aug, 2024 | 01:30

A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.11 and below; Aruba Instant 8.6.x.x: 8.6.0.6 and below; Aruba Instant 8.7.x.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.

Product-aruba_instant scalance_w1750d_firmware scalance_w1750d HPE Aruba Instant (IAP)

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2021-37718

Matching Score-8

Matching Score-8

CVSS Score-7.2||HIGH

EPSS-3.55% / 87.23%

7 Day CHG~0.00%

Published-07 Sep, 2021 | 12:32

Updated-04 Aug, 2024 | 01:23

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.

Product-arubaos sd-wan scalance_w1750d_firmware scalance_w1750d Aruba SD-WAN Software and Gateways; Aruba Operating System Software

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2021-37717

Matching Score-8

Matching Score-8

CVSS Score-7.2||HIGH

EPSS-3.55% / 87.23%

7 Day CHG~0.00%

Published-07 Sep, 2021 | 12:05

Updated-04 Aug, 2024 | 01:23

Product-arubaos sd-wan scalance_w1750d_firmware scalance_w1750d Aruba SD-WAN Software and Gateways; Aruba Operating System Software

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2024-46890

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-9.4||CRITICAL

EPSS-0.79% / 72.87%

7 Day CHG~0.00%

Published-12 Nov, 2024 | 12:49

Updated-13 Nov, 2024 | 23:12

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying OS.

Vendor-Siemens AG

Product-sinec_ins SINEC INS sinec_ins

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2021-33735

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-1.06% / 76.78%

7 Day CHG~0.00%

Published-12 Oct, 2021 | 09:49

Updated-03 Aug, 2024 | 23:58

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by sending crafted requests to the webserver of the affected application.

Vendor-Siemens AG

Product-sinec_nms SINEC NMS

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-33732

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-1.25% / 78.48%

7 Day CHG~0.00%

Published-12 Oct, 2021 | 09:49

Updated-03 Aug, 2024 | 23:58

Vendor-Siemens AG

Product-sinec_nms SINEC NMS

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-33731

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-2.15% / 83.58%

7 Day CHG~0.00%

Published-12 Oct, 2021 | 09:49

Updated-03 Aug, 2024 | 23:58

Vendor-Siemens AG

Product-sinec_nms SINEC NMS

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2021-33721

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.2||HIGH

EPSS-5.08% / 89.40%

7 Day CHG~0.00%

Published-10 Aug, 2021 | 10:35

Updated-03 Aug, 2024 | 23:58

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on the system with system privileges.

Vendor-Siemens AG

Product-sinec_network_management_system SINEC NMS

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2021-23337

Matching Score-8

Assigner-Snyk

Matching Score-8

Assigner-Snyk

CVSS Score-7.2||HIGH

EPSS-0.55% / 66.98%

7 Day CHG~0.00%

Published-15 Feb, 2021 | 12:15

Updated-16 Sep, 2024 | 19:15

Command Injection

Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2024-31485

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.6||HIGH

EPSS-0.54% / 66.74%

7 Day CHG~0.00%

Published-14 May, 2024 | 10:02

Updated-13 Feb, 2025 | 17:47

A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V5.30), SICORE Base system (All versions < V1.3.0). The web interface of affected devices is vulnerable to command injection due to missing server side input sanitation. This could allow an authenticated privileged remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

Product-SICORE Base system CPCI85 Central Processing/Communication sicore_base_system cpci85_firmware

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2017-5712

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-7.2||HIGH

EPSS-1.88% / 82.41%

7 Day CHG~0.00%

Published-21 Nov, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.

Vendor-ASUS (ASUSTeK Computer Inc.)Siemens AG Intel Corporation

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2024-52051

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7||HIGH

EPSS-0.03% / 5.43%

7 Day CHG-0.00%

Published-10 Dec, 2024 | 13:53

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC S7-PLCSIM V18 (All versions), SIMATIC STEP 7 Safety V17 (All versions), SIMATIC STEP 7 Safety V18 (All versions), SIMATIC STEP 7 Safety V19 (All versions < V19 Update 4), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP 7 V18 (All versions), SIMATIC STEP 7 V19 (All versions < V19 Update 4), SIMATIC WinCC Unified PC Runtime V18 (All versions), SIMATIC WinCC Unified PC Runtime V19 (All versions < V19 Update 4), SIMATIC WinCC Unified V17 (All versions), SIMATIC WinCC Unified V18 (All versions), SIMATIC WinCC Unified V19 (All versions < V19 Update 4), SIMATIC WinCC V17 (All versions), SIMATIC WinCC V18 (All versions), SIMATIC WinCC V19 (All versions < V19 Update 4), SIMOCODE ES V17 (All versions), SIMOCODE ES V18 (All versions), SIMOCODE ES V19 (All versions), SIMOTION SCOUT TIA V5.4 (All versions), SIMOTION SCOUT TIA V5.5 (All versions), SIMOTION SCOUT TIA V5.6 (All versions < V5.6 SP1 HF7), SINAMICS Startdrive V17 (All versions), SINAMICS Startdrive V18 (All versions), SINAMICS Startdrive V19 (All versions), SIRIUS Safety ES V17 (TIA Portal) (All versions), SIRIUS Safety ES V18 (TIA Portal) (All versions), SIRIUS Safety ES V19 (TIA Portal) (All versions), SIRIUS Soft Starter ES V17 (TIA Portal) (All versions), SIRIUS Soft Starter ES V18 (TIA Portal) (All versions), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions), TIA Portal Cloud V17 (All versions), TIA Portal Cloud V18 (All versions), TIA Portal Cloud V19 (All versions < V5.2.1.1). The affected devices do not properly sanitize user-controllable input when parsing user settings. This could allow an attacker to locally execute arbitrary commands in the host operating system with the privileges of the user.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2017-6865

Matching Score-6

Assigner-Siemens

Product-simatic_automation_tool sinaut_st7cc simatic_step_7_\(tia_portal\)simatic_wincc simatic_winac_rtx_2010 smart_pc_access simatic_wincc_flexible_2008 simatic_winac_rtx_f_2010 security_configuration_tool sinema_server pcs_7 sinumerik_808d_programming_tool simatic_wincc_\(tia_portal\)primary_setup_tool simatic_step_7_micro\/win_smart simatic_net_pc-software SIMATIC WinAC RTX F 2010 SP2 Security Configuration Tool (SCT)SIMATIC STEP 7 (TIA Portal) V13 SIMATIC WinCC (TIA Portal) V14 SIMATIC Automation Tool SIMATIC WinCC (TIA Portal) V13 SIMATIC WinCC V7.2 and prior SIMATIC NET PC-Software SIMATIC WinCC V7.3 SIMATIC WinCC flexible 2008 STEP 7 - Micro/WIN SMART SIMATIC WinCC V7.4 Primary Setup Tool (PST)SMART PC Access SIMATIC PCS 7 V8.1 SIMATIC STEP 7 V5.X SINEMA Server SINUMERIK 808D Programming Tool SINAUT ST7CC SIMATIC WinAC RTX 2010 SP2 SIMATIC PCS 7 V8.2 SIMATIC STEP 7 (TIA Portal) V14

Matching Score-6

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.08% / 25.32%

7 Day CHG~0.00%

Published-11 May, 2017 | 10:00

Updated-20 Apr, 2025 | 01:37

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC STEP 7 (TIA Portal) V13 (All versions < V13 SP2), SIMATIC STEP 7 (TIA Portal) V14 (All versions < V14 SP1), SIMATIC STEP 7 V5.X (All versions < V5.6), SIMATIC WinAC RTX 2010 SP2 (All versions), SIMATIC WinAC RTX F 2010 SP2 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14 (All versions < V14 SP1), SIMATIC WinCC V7.2 and prior (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Update 15), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd1), SIMATIC WinCC flexible 2008 (All versions < flexible 2008 SP5), SINAUT ST7CC (All versions installed in conjunction with SIMATIC WinCC < V7.3 Update 15), SINEMA Server (All versions < V14), SINUMERIK 808D Programming Tool (All versions < V4.7 SP4 HF2), SMART PC Access (All versions < V2.3), STEP 7 - Micro/WIN SMART (All versions < V2.3), Security Configuration Tool (SCT) (All versions < V5.0). Specially crafted PROFINET DCP broadcast packets sent to the affected products on a local Ethernet segment (Layer 2) could cause a Denial-of-Service condition of some services. The services require manual restart to recover.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2013-4912

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.8||MEDIUM

EPSS-0.53% / 66.34%

7 Day CHG~0.00%

Published-31 Jul, 2013 | 18:00

Updated-11 Apr, 2025 | 00:51

Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.

Vendor-n/a Siemens AG

Product-wincc n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-6867

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.61% / 68.88%

7 Day CHG~0.00%

Published-11 May, 2017 | 10:00

Updated-20 Apr, 2025 | 01:37

A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 before SP2 and V14 before SP1), SIMATIC WinCC (TIA Portal) Professional (V13 before SP2 and V14 before SP1) that could allow an authenticated, remote attacker who is member of the "administrators" group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_wincc_runtime simatic_wincc simatic_wincc_\(tia_portal\)Siemens SIMATIC WinCC

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-44228

Matching Score-6

Assigner-Apache Software Foundation

Vendor-percussion snowsoftware Apple Inc.The Apache Software Foundation Fedora Project Cisco Systems, Inc.Siemens AG Intel Corporation NetApp, Inc.Bentley Systems, Incorporated SonicWall Inc.Debian GNU/Linux

Matching Score-6

Assigner-Apache Software Foundation

CVSS Score-10||CRITICAL

EPSS-94.36% / 99.96%

7 Day CHG~0.00%

Published-10 Dec, 2021 | 00:00

Updated-08 Aug, 2025 | 18:52

Known KEV||Action Due Date - 2021-12-24||For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Product-common_services_platform_collector solidfire_enterprise_sds oncommand_insight datacenter_manager active_iq_unified_manager operation_scheduler connected_analytics_for_network_deployment industrial_edge_management_hub snapcenter integrated_management_controller_supervisor firepower_1150 iot_operations_dashboard wan_automation_engine firepower_2140 system_studio virtualized_voice_browser firepower_2110 dna_center solid_edge_cam_pro 6bk1602-0aa42-0tp0 energyip comos secure_device_onboard firepower_4120 sppa-t3000_ses3000_firmware siveillance_viewpoint firepower_1120 genomics_kernel_library contact_center_domain_manager crosswork_data_gateway xpedition_package_integrator network_dashboard_fabric_controller 6bk1602-0aa22-0tp0_firmware cloud_secure_agent nexus_insights 6bk1602-0aa22-0tp0 firepower_1010 6bk1602-0aa32-0tp0 email_security unified_contact_center_management_portal opcenter_intelligence xcode dna_spaces_connector finesse solidfire_\&_hci_storage_node packaged_contact_center_enterprise unified_sip_proxy cloudcenter_suite ucs_director energy_engage fxos customer_experience_cloud_agent paging_server logo\!_soft_comfort firepower_2130 siveillance_control_pro spectrum_power_7 cloud_manager network_insights_for_data_center synchro_4d 6bk1602-0aa52-0tp0 solid_edge_harness_design fog_director network_assurance_engine firepower_4115 nexus_dashboard smart_phy business_process_automation 6bk1602-0aa42-0tp0_firmware broadworks firepower_4140 emergency_responder ucs_central computer_vision_annotation_tool video_surveillance_manager connected_mobile_experiences synchro head-end_system_universal_device_integration_system sentron_powermanager fedora cloudcenter_cost_optimizer 6bk1602-0aa12-0tp0_firmware spectrum_power_4 cloudcenter vm_access_proxy cloudcenter_suite_admin oneapi_sample_browser 6bk1602-0aa52-0tp0_firmware firepower_4150 virtual_topology_system firepower_9300 prime_service_catalog brocade_san_navigator enterprise_chat_and_email cloud_connect firepower_4145 teamcenter unified_customer_voice_portal cloud_insights rhythmyx firepower_1140 sipass_integrated siveillance_vantage intersight_virtual_appliance sd-wan_vmanage ucs_central_software contact_center_management_portal webex_meetings_server unified_intelligence_center unified_workforce_optimization energyip_prepay crosswork_zero_touch_provisioning cx_cloud_agent 6bk1602-0aa12-0tp0 unity_connection cloudcenter_workload_manager optical_network_controller virtualized_infrastructure_manager video_surveillance_operations_manager 6bk1602-0aa32-0tp0_firmware unified_communications_manager advanced_malware_protection_virtual_private_cloud_appliance identity_services_engine snow_commander cyber_vision_sensor_management_extension firepower_4112 unified_contact_center_enterprise debian_linux unified_computing_system unified_contact_center_express xpedition_enterprise log4j desigo_cc_advanced_reports ontap_tools unified_communications_manager_im_and_presence_service firepower_2120 mobility_services_engine crosswork_network_automation dna_spaces vesys automated_subsea_tuning cyber_vision siveillance_command evolved_programmable_network_manager dna_spaces\firepower_4110 mendix firepower_4125 sppa-t3000_ses3000 unified_communications_manager_im_\&_presence_service e-car_operation_center nx industrial_edge_management workload_optimization_manager firepower_threat_defense navigator capital crosswork_platform_infrastructure network_services_orchestrator data_center_network_manager crosswork_optimization_engine mindsphere siguard_dsa gma-manager desigo_cc_info_center crosswork_network_controller siveillance_identity Apache Log4j2 Log4j2

CWE ID-CWE-20

Improper Input Validation

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-502

Deserialization of Untrusted Data

CWE ID-CWE-917

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

CVE-2021-44694

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 22.25%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-1287

Improper Validation of Specified Type of Input

CWE ID-CWE-20

Improper Input Validation

CVE-2021-44695

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-4.9||MEDIUM

EPSS-0.06% / 19.70%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-21 Apr, 2025 | 13:45

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

Vendor-Siemens AG

CWE ID-CWE-1286

Improper Validation of Syntactic Correctness of Input

CWE ID-CWE-20

Improper Input Validation

CVE-2021-41769

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.47% / 63.79%

7 Day CHG~0.00%

Published-11 Jan, 2022 | 11:27

Updated-04 Aug, 2024 | 03:15

A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MD89 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 6MU85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7KE85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SA82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SA86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SA87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SD82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SD86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SD87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SJ81 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SJ82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SJ85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SJ86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SK82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SK85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SL82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7SL86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SL87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SS85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7ST85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7SX85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UM85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT82 devices (CPU variant CP100) (All versions < V8.83), SIPROTEC 5 7UT85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT86 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7UT87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7VE85 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 7VK87 devices (CPU variant CP300) (All versions < V8.83), SIPROTEC 5 Compact 7SX800 devices (CPU variant CP050) (All versions < V8.83). An improper input validation vulnerability in the web server could allow an unauthenticated user to access device information.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2013-3634

Matching Score-6

Assigner-MITRE Corporation

Product-scalance_x204irt scalance_x200-4p_irt scalance_x202-2p_irt scalance_x202-2irt scalance_x200irt_firmware scalance_xf204irt scalance_x201-3p_irt n/a

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.39% / 59.13%

7 Day CHG~0.00%

Published-24 May, 2013 | 20:00

Updated-11 Apr, 2025 | 00:51

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (Versions < V5.0.0 for CVE-2013-3633 and versions < V4.5.0 for CVE-2013-3634), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.1.0). The implementation of SNMPv3 does not check the user credentials sufficiently. Therefore, an attacker is able to execute SNMP commands without correct credentials.

Vendor-n/a Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2013-0669

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-6

CVSS Score-4||MEDIUM

EPSS-0.17% / 38.10%

7 Day CHG~0.00%

Published-21 Mar, 2013 | 14:00

Updated-11 Apr, 2025 | 00:51

The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted HTTP request.

Vendor-n/a Siemens AG

Product-wincc_tia_portal n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37206

Matching Score-6

Assigner-Siemens

Product-siprotec_5_with_cpu_variant_cp300 siprotec_5_with_cpu_variant_cp100 siprotec_5_with_cpu_variant_cp050 SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.58% / 67.78%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Received webpackets are not properly processed. An unauthenticated remote attacker with access to any of the Ethernet interfaces could send specially crafted packets to force a restart of the target device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2012-3003

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-6

CVSS Score-5.8||MEDIUM

EPSS-0.33% / 55.01%

7 Day CHG~0.00%

Published-08 Jun, 2012 | 18:00

Updated-11 Apr, 2025 | 00:51

Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in a GET request.

Vendor-n/a Siemens AG

Product-wincc n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2024-38879

Matching Score-6

Assigner-Siemens

Product-omnivise_t3000_application_server Omnivise T3000 Application Server R9.2 Omnivise T3000 R8.2 SP3 Omnivise T3000 R8.2 SP4 omnivise_t3000_application_server omnivise_t3000

Matching Score-6

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.20% / 42.69%

7 Day CHG~0.00%

Published-02 Aug, 2024 | 10:36

Updated-20 Sep, 2024 | 23:26

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions). The affected system exposes the port of an internal application on the public network interface allowing an attacker to circumvent authentication and directly access the exposed application.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34311

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Mono_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13352)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34301

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13196)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34319

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing SGI files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13404)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34294

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13023

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34298

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34316

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The DL180CoolType.dll library in affected applications lacks proper validation of user-supplied data when parsing PDF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13380)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34330

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.40% / 60.17%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13430)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-416

Use After Free

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34300

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13194)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34297

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13059)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34310

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13351)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34293

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Gif_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13020)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2021-34323

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.8||HIGH

EPSS-0.42% / 60.98%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:03

Updated-04 Aug, 2024 | 00:05

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Jt981.dll library in affected applications lacks proper validation of user-supplied data when parsing JT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13419)

Vendor-Siemens AG

Product-jt2go teamcenter_visualization JT2Go Teamcenter Visualization

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-20

Improper Input Validation

CVE-2014-2733

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.38% / 58.35%

7 Day CHG~0.00%

Published-19 Apr, 2014 | 19:00

Updated-12 Apr, 2025 | 10:46

Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.

Vendor-n/a Siemens AG

Product-sinema_server n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2024-35212

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.29% / 51.90%

7 Day CHG~0.00%

Published-11 Jun, 2024 | 11:15

Updated-11 Feb, 2025 | 11:15

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V1.2). The affected application lacks input validation due to which an attacker can gain access to the Database entries.

Vendor-Siemens AG

Product-sinec_traffic_analyzer SINEC Traffic Analyzer sinec_traffic_analyzer

CWE ID-CWE-20

Improper Input Validation

CVE-2011-4530

Matching Score-6

Assigner-CERT/CC

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-6

Assigner-CERT/CC

CVSS Score-5||MEDIUM

EPSS-19.73% / 95.21%

7 Day CHG~0.00%

Published-08 Jan, 2012 | 20:00

Updated-11 Apr, 2025 | 00:51

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.

Vendor-n/a Siemens AG

Product-automation_license_manager n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-14023

Matching Score-6

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-6

CVSS Score-4.9||MEDIUM

EPSS-2.77% / 85.45%

7 Day CHG~0.00%

Published-06 Nov, 2017 | 22:00

Updated-20 Apr, 2025 | 01:37

An Improper Input Validation issue was discovered in Siemens SIMATIC PCS 7 V8.1 prior to V8.1 SP1 with WinCC V7.3 Upd 13, and V8.2 all versions. The improper input validation vulnerability has been identified, which may allow an authenticated remote attacker who is a member of the administrators group to crash services by sending specially crafted messages to the DCOM interface.

Vendor-n/a Siemens AG

Product-simatic_pcs7 simatic_wincc Siemens SIMATIC PCS 7

CWE ID-CWE-20

Improper Input Validation

CVE-2021-27388

Matching Score-6

Assigner-Siemens

Product-sinamics_sl150 sinamics_sm150i sinamics_sm150_firmware sinamics_sl150_firmware sinamics_sm150i_firmware sinamics_sm150 SINAMICS Medium Voltage Products, Remote Access

Matching Score-6

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-1.72% / 81.63%

7 Day CHG~0.00%

Published-15 Jun, 2021 | 19:40

Updated-03 Aug, 2024 | 20:48

SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).

Vendor-n/a Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2021-44221

Matching Score-6

Assigner-Siemens

Matching Score-6

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.54% / 66.58%

7 Day CHG~0.00%

Published-12 Jul, 2022 | 10:06

Updated-04 Aug, 2024 | 04:17

A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing framework. This could allow an remote attacker to trigger a denial of service of the affected system.

Vendor-Siemens AG

Product-simatic_easie_core_package SIMATIC eaSie Core Package

CWE ID-CWE-20

Improper Input Validation

CVE-2019-13939

Matching Score-6

Assigner-Siemens