Vulnerabilidades de Siemens

CVEs publicadas que afetam produtos de Siemens: 310 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-40827 Alta · 7.8 CWE-427 11/11/2025

Uncontrolled Search Path Element em Siemens Software Center

A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected application is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.

CVE-2025-40817 Média · 6.5 CWE-306 11/11/2025

Missing Authentication for Critical Function em Siemens LOGO! 12/24RCE

CVE-2025-40816 Alta · 7.6 CWE-306 11/11/2025

Missing Authentication for Critical Function em Siemens LOGO! 12/24RCE

CVE-2025-40815 Alta · 7.2 CWE-120 11/11/2025

Classic Buffer Overflow em Siemens LOGO! 12/24RCE

CVE-2025-40763 Alta · 7.8 CWE-427 11/11/2025

Uncontrolled Search Path Element em Siemens Altair Grid Engine

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loading shared libraries, allowing path hijacking through malicious library substitution. This could allow a local attacker to execute arbitrary code with superuser privileges by manipulating the environment variable and placing a malicious library in the controlled path.

CVE-2025-40760 Média · 5.5 CWE-209 11/11/2025

Information Exposure Through an Error Message em Siemens Altair Grid Engine

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly handle error messages and discloses sensitive password hash information when processing user authentication requests. This could allow a local attacker to extract password hashes for privileged accounts, which can then be subjected to offline brute-force attacks.

CVE-2025-40744 Alta · 7.5 CWE-295 11/11/2025

Improper Certificate Validation em Siemens Solid Edge Se2025

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not properly validate client certificates to connect to License Service endpoint. This could allow an unauthenticated remote attacker to perform man in the middle attacks.

CVE-2024-32014 Média · 4.7 CWE-732 11/11/2025

Incorrect Permission Assignment for Critical Resource em Siemens Spectrum Power 4

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to alter the local database which contains the application credentials. This allows an attacker to gain administrative application privileges.

CVE-2024-32011 Alta · 8.8 CWE-829 11/11/2025

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12…

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to run arbitrary commands via the user interface. This user interface can be used via the network and allows the execution of commands as administrative application user.

CVE-2024-32010 Alta · 7.8 CWE-732 11/11/2025

Incorrect Permission Assignment for Critical Resource em Siemens Spectrum Power 4

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to extraction of database credentials via a world-readable credential file. This allows an attacker to connect to the database as privileged application user and to run system commands via the database.

CVE-2024-32009 Alta · 7.8 CWE-266 11/11/2025

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12…

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to wrongly set permissions to a binary which allows any local attacker to gain administrative privileges.

CVE-2024-32008 Alta · 7.8 CWE-648 11/11/2025

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12…

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application is vulnerable to a local privilege escalation due to an exposed debug interface on the localhost. This allows any local user to gain code execution as administrative application user.

CVE-2025-40812 Alta · 7.8 CWE-125 14/10/2025

Out-of-bounds Read em Siemens Solid Edge Se2024

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.

CVE-2025-40811 Alta · 7.8 CWE-125 14/10/2025

Out-of-bounds Read em Siemens Solid Edge Se2024

CVE-2025-40810 Alta · 7.8 CWE-787 14/10/2025

Out-of-bounds Write em Siemens Solid Edge Se2024

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.

CVE-2025-40809 Alta · 7.8 CWE-787 14/10/2025

Out-of-bounds Write em Siemens Solid Edge Se2024

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025 (All versions < V225.0 Update 6). The affected applications contains an out of bounds write vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process.

CVE-2025-40771 Crítica · 9.8 CWE-306 14/10/2025

Missing Authentication for Critical Function em Siemens SIMATIC CP 1542SP-1

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1542SP-1 IRC (6GK7542-6VX00-0XE0) (All versions < V2.4.24), SIMATIC CP 1543SP-1 (6GK7543-6WX00-0XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL (6AG2542-6VX00-4XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC (6AG1543-6WX00-7XE0) (All versions < V2.4.24), SIPLUS ET 200SP CP 1543SP-1 ISEC TX RAIL (6AG2543-6WX00-4XE0) (All versions < V2.4.24). Affected devices do not properly authenticate configuration connections. This could allow an unauthenticated remote attacker to access the configuration data.

CVE-2025-40774 Média · 4.4 CWE-257 14/10/2025

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected…

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications store user passwords encrypted in its database. Decryption keys are accessible to users with administrative privileges, allowing them to recover passwords. Successful exploitation of this vulnerability allows an attacker to obtain and use valid user passwords. This can lead to unauthorized access to user accounts, data breaches, and potential system compromise.

CVE-2025-40773 Média · 5.3 CWE-639 14/10/2025

Authorization Bypass Through User-Controlled Key (IDOR) em Siemens Sipass Integrated

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications contains a broken access control vulnerability. The authorization mechanism lacks sufficient server-side checks, allowing an attacker to execute a specific API request. Successful exploitation allows an attacker to potentially manipulate data belonging to other users.

CVE-2025-40772 Média · 6.1 CWE-79 14/10/2025

Cross-site Scripting (XSS) em Siemens Sipass Integrated

A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation allows an attacker to impersonate other users within the application and steal their session data. This could enable unauthorized access to accounts and potentially lead to privilege escalation.

CVE-2025-40765 Crítica · 9.8 CWE-306 14/10/2025

Missing Authentication for Critical Function em Siemens Telecontrol Server Basic

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.

CVE-2025-40755 Alta · 8.8 CWE-89 14/10/2025

SQL Injection em Siemens Sinec Nms

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications are vulnerable to SQL injection through getTotalAndFilterCounts endpoint. An authenticated low privileged attacker could exploit to insert data and achieve privilege escalation. (ZDI-CAN-26570)

CVE-2011-20002 Alta · 7.4 CWE-294 14/10/2025

Authentication Bypass by Capture-replay em Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.2), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.2). Affected controllers are vulnerable to capture-replay in the communication with the engineering software. This could allow an on-path attacker between the engineering software and the controller to execute any previously recorded commands at a later time (e.g. set the controller to STOP), regardless whether or not the controller had a password configured.

CVE-2011-20001 Alta · 7.5 CWE-20 14/10/2025

Improper Input Validation em Siemens SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants)

A vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All versions < V2.0.3), SIMATIC S7-1200 CPU V2 family (incl. SIPLUS variants) (All versions < V2.0.3). The web server interface of affected devices improperly processes incoming malformed HTTP traffic at high rate. This could allow an unauthenticated remote attacker to force the device entering the stop/defect state, thus creating a denial of service condition.

CVE-2025-39964 Média · 5.5 KEV Alta · 55 Exploit público CWE-362 13/10/2025

Linux Kernel Race Condition Vulnerability

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.