CVE-2024-33499: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

CVE-2024-30206: Download of Code Without Integrity Check

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

Siemens 多款产品 安全漏洞

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A security vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to an affected SIMATIC RTLS Locating Manager clien...

PT-2024-3573

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V3.0.1.1 Description The issue is related to a hard-coded encryption key used in the communication between the client and server. This could allow an unauthenticated remote attacker to compromise...

PT-2024-4508

Name of the Vulnerable Software and Affected Versions SIMATIC RTLS Locating Manager versions prior to V3.0.1.1 SIMATIC RTLS Locating Manager 6GT2780-0DA00 versions prior to V3.0.1.1 SIMATIC RTLS Locating Manager 6GT2780-0DA10 versions prior to V3.0.1.1 SIMATIC RTLS Locating Manager 6GT2780-0DA20...

PT-2024-4461

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V3.0 Description The issue is related to the absence of an immutable root of trust in the device's firmware, which can be exploited through an unrestricted USB port. This could allow an attacker with local...

Siemens SIMATIC CN 4100 信任管理问题漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability exists in the Siemens SIMATIC CN 4100 due to an affected device containing undocumented users and credentials. An attacker could exploit the vulnerability to misuse the credentials to compromise th...

CVE-2024-32742: Missing Immutable Root of Trust in Hardware

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in several products including. Parasolid, Ruggedcom, SIMATIC, SICAM and Tecnomatix. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that could result in the following categories of damage: Denial-of-Service DoS...

CVE-2024-32740: Use of Hard-coded Credentials

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains undocumented users and credentials. An attacker could misuse the credentials to compromise the device locally or over the network...

Siemens SIMATIC CN 4100 安全漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A hard-coded password vulnerability exists in the Siemens SIMATIC CN 4100, which can be exploited by an attacker to gain root access to the device...

PT-2024-3810

Name of the Vulnerable Software and Affected Versions Security Configuration Tool SCT versions prior to V5.0 SP2 SIMATIC Automation Tool versions prior to V5.0 SP2 SIMATIC BATCH V9.1 versions prior to V9.1 SP2 Upd5 SIMATIC NET PC Software V16 versions prior to V16 Update 8 SIMATIC NET PC Software...

Siemens 多款产品 安全漏洞

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A plaintext transfer of sensitive information vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to the affected...

Siemens SIMATIC RTLS Locating Manager

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Siemens SIMATIC CN 4100

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Softing edgeConnector 安全漏洞

Softing edgeConnector is a Docker-based software application from Softing Inc. It can access process data in SIMATIC S7, SINUMERIK 840D and Modbus TCP controllers. A security vulnerability exists in Softing edgeConnector that stems from a specific flaw in the handling of OPC UA ConditionRefresh...

Softing edgeConnector 安全漏洞

Softing edgeConnector is a Docker-based software application from Softing Inc. It can access process data in SIMATIC S7, SINUMERIK 840D and Modbus TCP controllers. A security vulnerability exists in Softing edgeConnector that originates from a dereferenced null pointer in the handling of OPC clie...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2023-6121)

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a remote attacker to send a crafted TCP packet, triggering a heap-based buffer overflow that results in kmalloc data being printed and potentially leaked to the kernel ring buffer...

Siemens SIMATIC and SCALANCE Devices Improper Check for Unusual or Exceptional Conditions (CVE-2023-5678)

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHgeneratekey to generate an X9.42 DH key may experience long delays. Likewise, applications that use...

Siemens SIMATIC S7-1500 Truncation of Security-relevant Information (CVE-2023-48795)

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message. A client and server may consequently end up with a connection f...