460 matches found
CVE-2019-10915
The vulnerability is an authentication bypass in the TIA Administrator server. An attacker could execute arbitrary application commands through websockets on the node.js server which is externally exposed by default. By exploiting this vulnerability, an unauthenticated remote attacker could perfo...
Vulnerabilities present in Siemens products
Siemens has identified vulnerabilities in various products, including SCALANCE, SIMATIC, SINAMICS, SIPROTEC, and TIA Portal. These vulnerabilities pose a threat to malicious actors, who could exploit them to cause the following types of damage: - Denial-of-Service DoS attacks - Data manipulation ...
CVE-2026-25786
Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the page. If a...
CVE-2026-25786
CVE-2026-25786 affects devices where the web interface’s communication parameters page renders a PLC/station name. The root cause is inadequate validation/sanitization of the name, enabling an authenticated user (who is allowed to download a TIA project) to inject malicious scripts into the page....
CVE-2026-25787: Improper Neutralization of Input During Web Page Generation
Affected devices do not properly validate and sanitize Technology Object TO name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker who is authorized to download a TIA project into the product, to inject malicious scripts into the...
CVE-2025-23365
A vulnerability has been identified in TIA Administrator All versions V3.0.6. The affected application allows low-privileged users to trigger installations by overwriting cache files and modifying the downloads path. This would allow an attacker to escalate privilege and exceute arbitrary code...
TIA Administrator Cryptographic Signature Code Execution
The vulnerability of the TIA Administrator software-related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
EUVD-2016-9409
Malware in sbrugna...
EUVD-2018-3484
Malware in sbrugna...
EUVD-2021-23746
Malware in sbrugna...
EUVD-2016-8807
Malware in sbrugna...
EUVD-2020-17928
Malware in sbrugna...
EUVD-2014-8388
Malware in sbrugna...
EUVD-2014-8389
Malware in sbrugna...
EUVD-2016-8808
Malware in sbrugna...
EUVD-2019-2629
Malware in sbrugna...
EUVD-2019-2648
Malware in sbrugna...
EUVD-2013-0681
Malware in sbrugna...