Resumen ejecutivo
Siemens ha publicado 746 vulnerabilidades: 40 de severidad crítica, 330 de severidad alta, 254 de severidad media y 122 de severidad baja que, en caso de ser explotadas, podrían permitir la ejecución de código, la escalada de privilegios, el acceso o modificación de información, la evasión de controles de seguridad, ataques de path traversal, Cross-Site Scripting (XSS) o provocar una denegación de servicio (DoS).
Referencias adicionales
- SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
- SSB-091449: SIMATIC S7 PLCs and Related Products
- SSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM Fuse
- SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL
- SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs
- SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products
- SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit
- SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API
- SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
- SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW
- SSA-550198: Authenticated Remote Code Execution in WinCC
- SSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web Server
- SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller
- SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of SIMATIC S7-1500 TM MFP
- SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices
- SSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices
- SSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher