Vulnerability-Lookup

SSA-678870

Vulnerability from csaf_siemens - Published: 2026-11-10 00:00 - Updated: 2026-11-10 00:00

Summary

SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Software Products

Notes

Summary: On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products. Please also have a look on following Software Field Bulletins: Teamcenter: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204 Polarion: https://support.sw.siemens.com/en-US/knowledge-base/PL8869197 Manufacturing Operations Center (Opcenter) and Process Preparation X: https://support.sw.siemens.com/en-US/knowledge-base/PL8869211 Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 28 products

Product	Version	Remediation
Opcenter Execution Core Siemens / Opcenter Execution Core	vers:all/*	Mitigation None Available
Opcenter Execution Discrete Siemens / Opcenter Execution Discrete	vers:all/*	Mitigation None Available
Opcenter Execution Foundation Siemens / Opcenter Execution Foundation	vers:all/*	Mitigation None Available
Opcenter Execution Pharma Siemens / Opcenter Execution Pharma	vers:all/*	Mitigation None Available
Opcenter Execution Process Siemens / Opcenter Execution Process	vers:all/*	Mitigation None Available
Opcenter Intelligence Siemens / Opcenter Intelligence	vers:all/*	Mitigation None Available
Opcenter Intra Plant Logistics Siemens / Opcenter Intra Plant Logistics	vers:all/*	Mitigation None Available
Opcenter Quality Siemens / Opcenter Quality	vers:all/*	Mitigation None Available
Opcenter RDnL Siemens / Opcenter RDnL	vers:all/*	Mitigation None Available
Opcenter X Siemens / Opcenter X	vers:all/*	Mitigation None Available
PADS Pro Essentials Siemens / PADS Pro Essentials	vers:all/*	Mitigation None Available
PADS Pro Student Edition Siemens / PADS Pro Student Edition	vers:all/*	Mitigation None Available
PADS Professional Siemens / PADS Professional	vers:all/*	Mitigation None Available
PAVE360 Automotive 2026 Siemens / PAVE360 Automotive 2026	vers:all/*	None Available
Process Preparation X Siemens / Process Preparation X	vers:all/*	Mitigation None Available
Simcenter Executable Digital Twin Siemens / Simcenter Executable Digital Twin	vers:all/*	None Available
Simcenter Studio Siemens / Simcenter Studio	vers:all/*	None Available
Teamcenter V2412 Siemens / Teamcenter V2412	vers:all/*	Mitigation None Available
Teamcenter V2506 Siemens / Teamcenter V2506	vers:all/*	Mitigation None Available
Teamcenter V2512 Siemens / Teamcenter V2512	vers:all/*	Mitigation None Available
Teamcenter V2606 Siemens / Teamcenter V2606	vers:all/*	Mitigation None Available
Xpedition Designer Siemens / Xpedition Designer	vers:all/*	Mitigation None Available
Xpedition Enterprise Siemens / Xpedition Enterprise	vers:all/*	Mitigation None Available
HyperLynx Siemens / HyperLynx	vers:all/*	Mitigation None Available
Innexis Architecture Native Acceleration 2026 Siemens / Innexis Architecture Native Acceleration 2026	vers:all/*	None Available
Insights Hub Siemens / Insights Hub	vers:all/*	None Available
Opcenter Connect Electronics Siemens / Opcenter Connect Electronics	vers:all/*	Mitigation None Available
Opcenter Connect MOM Siemens / Opcenter Connect MOM	vers:all/*	Mitigation None Available

Known not affected 8 products

Product	Identifier	Version	Remediation
Calibre Siemens / Calibre		vers:all/*
Calibre ICE Siemens / Calibre ICE		vers:all/*
Pathway to Learning Engineering Siemens / Pathway to Learning Engineering		vers:all/*
Polarion Siemens / Polarion		vers:all/*
Solid Edge Siemens / Solid Edge		vers:all/*
Capital Siemens / Capital		vers:all/*
Teamcenter Share Siemens / Teamcenter Share		vers:all/*
Designcenter X Essentials Siemens / Designcenter X Essentials		vers:all/*

Threats

Impact Node.js is not present

Impact Polarion uses node.js 10.15.0 - Brotli was introduced to node.js in 10.16.0 further information: https://support.sw.siemens.com/en-US/knowledge-base/PL8869197

References

2 references

URL	Category
https://cert-portal.siemens.com/productcert/html/…	self
https://cert-portal.siemens.com/productcert/csaf/…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as \"Node2Shell\" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products.\n\nPlease also have a look on following Software Field Bulletins:\n\nTeamcenter: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204\n\nPolarion: https://support.sw.siemens.com/en-US/knowledge-base/PL8869197\n\nManufacturing Operations Center (Opcenter) and Process Preparation X: https://support.sw.siemens.com/en-US/knowledge-base/PL8869211\n\nSiemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Software Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-678870.html"
      },
      {
        "category": "self",
        "summary": "SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Software Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-678870.json"
      }
    ],
    "title": "SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Software Products",
    "tracking": {
      "current_release_date": "2026-11-10T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-678870",
      "initial_release_date": "2026-11-10T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-11-10T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        }
      ],
      "status": "interim",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Calibre",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "Calibre"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Calibre ICE",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "Calibre ICE"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Capital",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "Capital"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Designcenter X Essentials",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "Designcenter X Essentials"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "HyperLynx",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "HyperLynx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Innexis Architecture Native Acceleration 2026",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "Innexis Architecture Native Acceleration 2026"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Insights Hub",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "Insights Hub"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Connect Electronics",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Connect Electronics"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Connect MOM",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Connect MOM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Core",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Core"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Discrete",
                  "product_id": "11"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Discrete"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Foundation",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Foundation"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Pharma",
                  "product_id": "13"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Pharma"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Execution Process",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Execution Process"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Intelligence",
                  "product_id": "15"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Intelligence"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Intra Plant Logistics",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Intra Plant Logistics"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter Quality",
                  "product_id": "17"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter Quality"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter RDnL",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter RDnL"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Opcenter X",
                  "product_id": "19"
                }
              }
            ],
            "category": "product_name",
            "name": "Opcenter X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Pro Essentials",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Pro Essentials"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Pro Student Edition",
                  "product_id": "21"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Pro Student Edition"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PADS Professional",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "PADS Professional"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Pathway to Learning Engineering",
                  "product_id": "23"
                }
              }
            ],
            "category": "product_name",
            "name": "Pathway to Learning Engineering"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "PAVE360 Automotive 2026",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "PAVE360 Automotive 2026"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Polarion",
                  "product_id": "25"
                }
              }
            ],
            "category": "product_name",
            "name": "Polarion"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Process Preparation X",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "Process Preparation X"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Simcenter Executable Digital Twin",
                  "product_id": "27"
                }
              }
            ],
            "category": "product_name",
            "name": "Simcenter Executable Digital Twin"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Simcenter Studio",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "Simcenter Studio"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Solid Edge",
                  "product_id": "29"
                }
              }
            ],
            "category": "product_name",
            "name": "Solid Edge"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter Share",
                  "product_id": "30"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter Share"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter V2412",
                  "product_id": "31"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter V2412"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter V2506",
                  "product_id": "32"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter V2506"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter V2512",
                  "product_id": "33"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter V2512"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Teamcenter V2606",
                  "product_id": "34"
                }
              }
            ],
            "category": "product_name",
            "name": "Teamcenter V2606"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Designer",
                  "product_id": "35"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Designer"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "Xpedition Enterprise",
                  "product_id": "36"
                }
              }
            ],
            "category": "product_name",
            "name": "Xpedition Enterprise"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-111497",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "flags": [
        {
          "label": "component_not_present",
          "product_ids": [
            "30",
            "2",
            "1",
            "23",
            "4",
            "29",
            "3"
          ]
        },
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "25"
          ]
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\r\n\r\n\r\n\r\n\r\n\r\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "10",
          "11",
          "12",
          "13",
          "14",
          "15",
          "16",
          "17",
          "18",
          "19",
          "20",
          "21",
          "22",
          "24",
          "26",
          "27",
          "28",
          "31",
          "32",
          "33",
          "34",
          "35",
          "36",
          "5",
          "6",
          "7",
          "8",
          "9"
        ],
        "known_not_affected": [
          "1",
          "2",
          "23",
          "25",
          "29",
          "3",
          "30",
          "4"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Disable brotli compression and block brotli compression at the network firewall.",
          "product_ids": [
            "20",
            "21",
            "22",
            "35",
            "36",
            "5"
          ]
        },
        {
          "category": "mitigation",
          "details": "For Teamcenter manual mitigation instructions can be found here: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204",
          "product_ids": [
            "31",
            "32",
            "33",
            "34"
          ]
        },
        {
          "category": "mitigation",
          "details": "The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211",
          "product_ids": [
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "26",
            "8",
            "9"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "24",
            "26",
            "27",
            "28",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "5",
            "6",
            "7",
            "8",
            "9"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "10",
            "11",
            "12",
            "13",
            "14",
            "15",
            "16",
            "17",
            "18",
            "19",
            "20",
            "21",
            "22",
            "24",
            "26",
            "27",
            "28",
            "31",
            "32",
            "33",
            "34",
            "35",
            "36",
            "5",
            "6",
            "7",
            "8",
            "9"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Node.js is not present",
          "product_ids": [
            "30",
            "2",
            "1",
            "23",
            "4",
            "29",
            "3"
          ]
        },
        {
          "category": "impact",
          "details": "Polarion uses node.js 10.15.0 - Brotli was introduced to node.js in 10.16.0\r\n\r\n\r\nfurther information:\r\nhttps://support.sw.siemens.com/en-US/knowledge-base/PL8869197",
          "product_ids": [
            "25"
          ]
        }
      ],
      "title": "CVE-2026-111497"
    }
  ]
}

CVE-2026-111497 (GCVE-0-2026-111497)

Vulnerability from cvelistv5 – Published: 2026-10-22 13:35 – Updated: 2026-11-10 12:50

Title

Out-of-Bounds Write in Google Brotli Decoder

Summary

Severity

9.2 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: active Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-23 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write
CWE-252 - Unchecked Return Value

Assigner

Google CNA under the Google root

CNA scorecard B 78/100 over 38 records in the last 180 days details

References

24 references

URL	Tags
https://nodejs.org/en/blog/vulnerability/october-…	patch
https://github.com/andybalholm/brotli/releases/ta…	release-notesthird-party-advisory
https://ellio.tech/en/blog/node2shell-cve-2026-11…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource
https://github.com/advisories/GHSA-9v8h-qqgm-4m35
http://www.openwall.com/lists/oss-security/2026/1…
https://lists.debian.org/debian-lts-announce/2026…
http://www.openwall.com/lists/oss-security/2026/10/24/6
http://www.openwall.com/lists/oss-security/2026/1…
http://www.openwall.com/lists/oss-security/2026/1…
https://www.aikido.dev/blog/node2shell-nodejs-bro…
https://broccoli2shell.com
https://github.com/dotnet/announcements/issues/494
https://github.com/google/brotli/releases/tag/v1.2.1
https://github.com/google/brotli/releases/tag/v1.1.1
https://github.com/google/brotli/releases/tag/v1.0.10
https://patchtheplanet.org/brotli
http://www.openwall.com/lists/oss-security/2026/1…
http://www.openwall.com/lists/oss-security/2026/11/03/2
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

76 products

Vendor	Product	Version
Google	Brotli	Affected: 1.0.3 , < 1.0.10 (semver) Affected: 1.1.0 , < 1.1.1 (semver) Affected: 1.2.0 , < 1.2.1 (semver)
Siemens	Calibre	Unaffected: 0 , < * (custom)
Siemens	Calibre ICE	Unaffected: 0 , < * (custom)
Siemens	Capital	Unaffected: 0 , < * (custom)
Siemens	Cloud Connector Configurator	Affected: 0 , < V1.24.3 (custom)
Siemens	Common Configurator (CC on IEM)	Affected: 0 , < * (custom)
Siemens	Common Configurator on Device (CC on Edge)	Affected: 0 , < * (custom)
Siemens	COMOS Walkinside	Affected: 0 , < * (custom)
Siemens	Data Flow Monitoring	Affected: 0 , < V3.0.18 (custom)
Siemens	Databus Configurator	Affected: 0 , < V4.0.1 (custom)
Siemens	DataXess Configurator	Affected: 0 , < V1.5.7 (custom)
Siemens	Designcenter X Essentials	Unaffected: 0 , < * (custom)
Siemens	Desigo CC family V8	Affected: 0 , < * (custom)
Siemens	Desigo CC family V9	Affected: 0 , < * (custom)
Siemens	Edge OPC UA Server Configurator	Affected: 0 , < V2.3.10 (custom)
Siemens	Flow Creator Configurator	Affected: 0 , < V1.15.1 (custom)
Siemens	gDAP (gPROMS Digital Application Platform)	Unaffected: 0 , < * (custom)
Siemens	Gridscale X DSA	Affected: V5.3 , < V5.4 (custom)
Siemens	Gridscale X PSS®E	Affected: 0 , < V36.8.0 (custom)
Siemens	Heliox Dual Port 60kW	Unaffected: 0 , < * (custom)
Siemens	Heliox Flex Pro	Unaffected: 0 , < * (custom)
Siemens	HyperLynx	Affected: 0 , < * (custom)
Siemens	Industrial Edge Hub	Affected: 0 , < * (custom)
Siemens	Industrial Edge Management Cloud	Affected: 0 , < * (custom)
Siemens	Innexis Architecture Native Acceleration 2026	Affected: 0 , < * (custom)
Siemens	Insights Hub	Affected: 0 , < * (custom)
Siemens	Opcenter Connect Electronics	Affected: 0 , < * (custom)
Siemens	Opcenter Connect MOM	Affected: 0 , < * (custom)
Siemens	Opcenter Execution Core	Affected: 0 , < * (custom)
Siemens	Opcenter Execution Discrete	Affected: 0 , < * (custom)
Siemens	Opcenter Execution Foundation	Affected: 0 , < * (custom)
Siemens	Opcenter Execution Pharma	Affected: 0 , < * (custom)
Siemens	Opcenter Execution Process	Affected: 0 , < * (custom)
Siemens	Opcenter Intelligence	Affected: 0 , < * (custom)
Siemens	Opcenter Intra Plant Logistics	Affected: 0 , < * (custom)
Siemens	Opcenter Quality	Affected: 0 , < * (custom)
Siemens	Opcenter RDnL	Affected: 0 , < * (custom)
Siemens	Opcenter X	Affected: 0 , < * (custom)
Siemens	PADS Pro Essentials	Affected: 0 , < * (custom)
Siemens	PADS Pro Student Edition	Affected: 0 , < * (custom)
Siemens	PADS Professional	Affected: 0 , < * (custom)
Siemens	Pathway to Learning Engineering	Unaffected: 0 , < * (custom)
Siemens	PAVE360 Automotive 2026	Affected: 0 , < * (custom)
Siemens	Polarion	Unaffected: 0 , < * (custom)
Siemens	Process Preparation X	Affected: 0 , < * (custom)
Siemens	Project Server Web Administration Tool	Affected: 0 , < * (custom)
Siemens	SICHARGE FLEX	Unaffected: 0 , < * (custom)
Siemens	SICHARGE UC	Unaffected: 0 , < * (custom)
Siemens	Sifinity Go	Unaffected: 0 , < * (custom)
Siemens	Sifinity Setup	Unaffected: 0 , < * (custom)

50 of 76 products shown. All of them on the page of CVE-2026-111497.

Date Public

2026-02-27 07:50

Credits

OpenAI Codex Security - Khai Tran and Sylvie Mayer

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-111497",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-28T03:55:48.896Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-11-03T21:05:46.791Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://github.com/advisories/GHSA-9v8h-qqgm-4m35"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/23/25"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/24/6"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/12"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/13"
          },
          {
            "url": "https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497"
          },
          {
            "url": "https://broccoli2shell.com"
          },
          {
            "url": "https://github.com/dotnet/announcements/issues/494"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.2.1"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.1.1"
          },
          {
            "url": "https://github.com/google/brotli/releases/tag/v1.0.10"
          },
          {
            "url": "https://patchtheplanet.org/brotli"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/10/26/16"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/11/03/2"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "Calibre",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Calibre ICE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Capital",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Cloud Connector Configurator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.24.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Common Configurator\u00a0(CC on IEM)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Common Configurator on Device\u00a0(CC on Edge)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "COMOS Walkinside",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Data Flow Monitoring",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.18",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Databus Configurator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.0.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "DataXess Configurator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.5.7",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Designcenter X Essentials",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Desigo CC family V9",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Edge OPC UA Server Configurator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.3.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Flow Creator Configurator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.15.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "gDAP (gPROMS Digital Application Platform)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Gridscale X DSA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.4",
                "status": "affected",
                "version": "V5.3",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Gridscale X PSS\u00aeE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V36.8.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Heliox Dual Port 60kW",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Heliox Flex Pro",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "HyperLynx",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Industrial Edge Hub",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Industrial Edge Management Cloud",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Innexis Architecture Native Acceleration 2026",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Insights Hub",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Connect Electronics",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Connect MOM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Execution Core",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Execution Discrete",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Execution Foundation",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Execution Pharma",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Execution Process",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Intelligence",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Intra Plant Logistics",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter Quality",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter RDnL",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Opcenter X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "PADS Pro Essentials",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "PADS Pro Student Edition",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "PADS Professional",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Pathway to Learning Engineering",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "PAVE360 Automotive 2026",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Polarion",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Process Preparation X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Project Server Web Administration Tool",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICHARGE FLEX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICHARGE UC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Sifinity Go",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Sifinity Setup",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC BRAUMAT",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2 Update 5",
                "status": "affected",
                "version": "V8.2 Update 1",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Profiling Tool",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC SISTAR",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2 Update 5",
                "status": "affected",
                "version": "V8.2 Update 1",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Companion",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.20",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.20 P17.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC OA V3.21",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Runtime Professional",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Unified for Industrial Edge",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Unified PC Runtime",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC Unified SIQENCE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC WinCC V7/V8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Simcenter Executable Digital Twin",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Simcenter Studio",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Solid Edge",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter Share",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2412",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2506",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Teamcenter V2606",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "TIA Administrator",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "User Management Component (UMC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "VersiCharge AC Series",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "VersiCloud",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Xpedition Designer",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Xpedition Enterprise",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-10T12:50:00.309Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-898633.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-443410.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-045512.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-678870.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-242944.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "github.com/google/brotli",
          "product": "Brotli",
          "repo": "https://github.com/google/brotli",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0.3",
              "versionType": "semver"
            },
            {
              "lessThan": "1.1.1",
              "status": "affected",
              "version": "1.1.0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2.1",
              "status": "affected",
              "version": "1.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "OpenAI Codex Security - Khai Tran and Sylvie Mayer"
        }
      ],
      "datePublic": "2026-02-27T07:50:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability in the Brotli decoder (\u003ccode\u003ec/dec/decode.c\u003c/code\u003e) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\u003cbr\u003e\u003cbr\u003e\u003c/p\u003e\u003cp\u003eUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.\u003cspan\u003e\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.\n\n\n\n\n\nUsers need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.2,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-252",
              "description": "CWE-252 Unchecked Return Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-27T14:58:42.704Z",
        "orgId": "14ed7db2-1595-443d-9d34-6215bf890778",
        "shortName": "Google"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"
        },
        {
          "tags": [
            "release-notes",
            "third-party-advisory"
          ],
          "url": "https://github.com/andybalholm/brotli/releases/tag/v1.2.7"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
            }
          ],
          "value": "Update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-Bounds Write in Google Brotli Decoder",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "14ed7db2-1595-443d-9d34-6215bf890778",
    "assignerShortName": "Google",
    "cveId": "CVE-2026-111497",
    "datePublished": "2026-10-22T13:35:41.975Z",
    "dateReserved": "2026-10-16T09:58:17.790Z",
    "dateUpdated": "2026-11-10T12:50:00.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted