Vulnerabilities fixed in Siemens products

🗓️ 08 Oct 2024 13:49:37Reported by NCSCType

Siemens fixed vulnerabilities across products; updates or mitigations issued to reduce risk.

Reporter	Title	Published	Views	Family All 380
BDU FSTEC	The vulnerability of the JT Open Toolkit (JTTK) and PLM XML SDK development tools is related to pointer assignment errors, which allow attackers to trigger a service failure.	17 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the JT Open Toolkit (JTTK) and PLM XML SDK development tools arises from the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.	17 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WibuKey64.sys driver of the WIBU-SYSTEMS WibuKey software lies in improper checking of boundaries, which can lead to service failure.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SINEC Security Monitor’s security software lies in the fact that it allows for the execution of arbitrary code with root privileges, as long as these arguments are implemented or modified.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Ember ZNet’s microprogramming software library for monitoring and controlling Sentron Powercenter 1000 allows a intruder to cause a service failure.	31 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web server of the microprogramming software for programmable logic controllers SIMATICS7-1500 and S7-1200 CPU family allows a hacker to redirect users to any desired URL address.	7 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Modbus TCP interface of the microprogramming software used in multifunctional measuring instruments for measuring electrical network parameters from Siemens SENTRON 7KM PAC3200 allows a perpetrator to circumvent existing security restrictions and gain unauthorized access to protected information.	11 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the 3D viewing tool JT and JT2Go lies in the overflow of buffers in the stack, allowing attackers to execute arbitrary code.	12 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BDF File Handler component in the software platform for numerical modeling and analysis of Simcenter Nastran products allows a hacker to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the BDF File Handler component in the software platform for numerical modeling and analysis of Simcenter Nastran products allows a hacker to execute arbitrary code.	14 Nov 202400:00	–	bdu_fstec

Vulners

Node

siemens jt2goMatch13.1.0.1

siemens jt2goMatch13.1.0.3

siemens jt2goMatch13.1.0

siemens jt2goMatch13.2.0.1

siemens jt2goMatch13.2.0.2

siemens jt2goMatch13.2.0.5

siemens jt2goMatch13.2

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-054046.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-254396.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-340240.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-368868.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-426509.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-430425.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-583523.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-626178.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-850560.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-852501.pdf

08 Oct 2024 13:49Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.9

CVSS 49.4

EPSS0.02948

SSVC