CVE-2024-56181

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

CVE-2024-56181

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

CVE-2024-56181

CVE-2024-56181 affects Siemens SIMATIC devices (e.g., Field PG M5, IPC BX-21A/BX-32A/BX-39A/BX-59A, PX-32A/PX-39A, RC/RW families, IPC127E/227E/277E/3000/327G/347G/377G/427E/477E/527G/627E/647E/677E/847E, ITP1000, etc.). The vulnerability stems from insufficient protection of EFI variables stored...

Siemens SIMATIC 缓冲区错误漏洞

Siemens SIMATIC is a configuration software from Siemens Germany. A buffer error vulnerability exists in Siemens SIMATIC, which arises from an inadequate protection mechanism for EFI variables, and could allow an authenticated attacker to modify the secure boot configuration. The following produc...

Siemens SIMATIC 缓冲区错误漏洞

Siemens SIMATIC is a configuration software from Siemens, Germany. A buffer error vulnerability exists in Siemens SIMATIC that stems from an inadequate protection mechanism for EFI variables, which could allow an authenticated attacker to disable the BIOS password...

CVE-2024-56182: Protection Mechanism Failure

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC Field PG M6 All versions V26.01.12, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC...

PT-2025-10725

Name of the Vulnerable Software and Affected Versions SIMATIC Field PG M5 versions prior to V26.01.12 SIMATIC Field PG M6 versions prior to V26.01.12 SIMATIC IPC BX-21A versions prior to V31.01.07 SIMATIC IPC BX-32A versions prior to V29.01.07 SIMATIC IPC BX-39A versions prior to V29.01.07 SIMATI...

PT-2025-10724

Name of the Vulnerable Software and Affected Versions SIMATIC Field PG M5 All versions SIMATIC IPC BX-21A versions prior to V31.01.07 SIMATIC IPC BX-32A versions prior to V29.01.07 SIMATIC IPC BX-39A versions prior to V29.01.07 SIMATIC IPC BX-59A versions prior to V32.01.04 SIMATIC IPC PX-32A...

Siemens SIMATIC S7-1500 TM MFP

SUMMARY Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens...

CVE-2024-56181: Protection Mechanism Failure

A vulnerability has been identified in SIMATIC Field PG M5 All versions, SIMATIC IPC BX-21A All versions V31.01.07, SIMATIC IPC BX-32A All versions V29.01.07, SIMATIC IPC BX-39A All versions V29.01.07, SIMATIC IPC BX-59A All versions V32.01.04, SIMATIC IPC PX-32A All versions V29.01.07, SIMATIC I...

The vulnerability of the web server of the microprogramming software for programmable logic controllers SIMATIC S7-1200 allows attackers to perform spoofing attacks.

The vulnerability of the web server of microprogrammed software-controlled logical controllers SIMATIC S7-1200 is related to errors in authenticating certificates. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

Siemens SIMATIC Devices Linux Kernel Out-of-bounds Write (CVE-2022-36280)

An out-of-boundsOOB memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxkms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial...

Siemens SIMATIC Devices Linux Kernel Use After Free (CVE-2022-42703)

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anonvma double reuse. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SIMATIC S7-1500 TM MFP BIOS Incorrect Default Permissions (CVE-2021-20269)

A flaw was found in the permissions of a log file created by kexec- tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipp...

Siemens SIMATIC Devices Linux Kernel Out-of-bounds Write (CVE-2021-33655)

When sending malicous data to kernel by ioctl cmd FBIOPUTVSCREENINFO,kernel will write memory out of bounds. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if descripti...

Siemens SIMATIC S7-1500 TM MFP BIOS Out-of-bounds Write (CVE-2020-10029)

The GNU C Library aka glibc or libc6 before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to...

Siemens SIMATIC Devices Linux Kernel Uncontrolled Resource Consumption (CVE-2022-39190)

An issue was discovered in net/netfilter/nftablesapi.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 8090...

Siemens SIMATIC Devices Linux Kernel Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3649)

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfsnewinode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch t...

Siemens SIMATIC Devices Linux Kernel Improper Authentication (CVE-2022-2503)

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

Siemens SIMATIC Devices Linux Kernel Use After Free (CVE-2022-42720)

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to trigger use- after-free conditions to potentially execute code. This plugin only works with Tenable.ot...