CVE-2025-40593

A vulnerability has been identified in SIMATIC CN 4100 All versions V4.0. The affected application allows to control the device by storing arbitrary files in the SFTP folder of the device. This could allow an attacker to cause a denial of service condition...

CVE-2025-40566

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions V4.1 Update 3, SIMATIC PCS neo V5.0 All versions V5.0 Update 1. Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session...

CVE-2025-40746

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...

CVE-2025-40795

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, User Management Component UMC All versions V2.15.1.3. Affected products contain a stack-based buffer overflow vulnerability in the...

CVE-2025-40771

A vulnerability has been identified in SIMATIC CP 1542SP-1 6GK7542-6UX00-0XE0 All versions V2.4.24, SIMATIC CP 1542SP-1 IRC 6GK7542-6VX00-0XE0 All versions V2.4.24, SIMATIC CP 1543SP-1 6GK7543-6WX00-0XE0 All versions V2.4.24, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL 6AG2542-6VX00-4XE0 All versions...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, which is related to the use of rigidly encrypted account data, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway lies in the use of strictly encrypted account data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the insufficient protection of registration data, allowing intruders to increase their privileges.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of SIMATIC IPC device’s microprogramming software lies in the improper assignment of permissions to critical resources. This allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of SIMATIC IPC microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the insufficient verification of input data. This allows a intruder to perform maintenance work without being detected.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to insufficient verification of input data. Exploiting this vulnerability could allow an intruder to cause a service failure...

The vulnerability of microprogrammed software in Siemens SIMATIC S7 programmable logic controllers is related to insufficient verification of the communication channel source. This allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7 programmable logic controllers is related to insufficient verification of the communication channel source. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the MICROprogramming software of the SIMATIC CN 4100 communication gateway, related to the lack of measures taken for data cleaning at the management level, allows a intruder to execute arbitrary codes.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200, related to improper release of resources, allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in programmable logic controllers SIMATIC S7-1200 is related to the improper release of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to access control errors, allows a intruder to trigger a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to access control errors. Exploiting this vulnerability could allow an intruder to cause service failures...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to information disclosure, allows a intruder to gain access to confidential information.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway relates to the exposure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential information...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to information disclosure, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway relates to the exposure of information. Exploiting this vulnerability can allow unauthorized individuals to gain unauthorized access to protected information...

The vulnerability of the software development environment for systems that automate technological processes, the Totally Integrated Automation Portal (Portal TIA), and the software used for modeling and simulating the operation of Siemens S7 controllers, arises due to deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the software development environment of Totally Integrated Automation Portal Portal TIA and the software for simulating and testing the operation of Siemens S7 controllers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an...

CVE-2022-27194

A vulnerability has been identified in SIMATIC PCS neo Administration Console All versions V3.1 SP1, SINETPLAN All versions, TIA Portal V15, V15.1, V16 and V17. The affected system cannot properly process specially crafted packets sent to port 8888/tcp. A remote attacker could exploit this...

CVE-2022-27640

A vulnerability has been identified in SIMATIC CP 442-1 RNA All versions V1.5.18, SIMATIC CP 443-1 RNA All versions V1.5.18. The affected devices improperly handles excessive ARP broadcast requests. This could allow an attacker to create a denial of service condition by performing ARP storming...

The vulnerability of the User Management Component (UMC) in the web-based industrial process management system SIMATIC PCS neo allows a attacker to trigger a service failure.

The vulnerability of the User Management Component UMC in the web-based system for managing technological processes of SIMATIC PCS neo is related to the violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...