Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2024-53832 (GCVE-0-2024-53832)
Vulnerability from cvelistv5 – Published: 2024-12-10 13:54 – Updated: 2025-11-03 20:48
VLAI?
EPSS
Summary
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.
Severity ?
4.6 (Medium)
CWE
- CWE-522 - Insufficiently Protected Credentials
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Siemens | CPCI85 Central Processing/Communication |
Affected:
0 , < V05.30
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-53832",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-12-10T15:16:55.369787Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-12-10T17:17:37.372Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2025-11-03T20:48:25.060Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://seclists.org/fulldisclosure/2025/Feb/19"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "CPCI85 Central Processing/Communication",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V05.30",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-522",
"description": "CWE-522: Insufficiently Protected Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-12-10T13:54:14.682Z",
"orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"shortName": "siemens"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
"assignerShortName": "siemens",
"cveId": "CVE-2024-53832",
"datePublished": "2024-12-10T13:54:14.682Z",
"dateReserved": "2024-11-22T14:39:32.052Z",
"dateUpdated": "2025-11-03T20:48:25.060Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.\"}, {\"lang\": \"es\", \"value\": \"Se ha identificado una vulnerabilidad en CPCI85 Central Processing/Communication (Todas las versiones anteriores a V05.30). Los dispositivos afectados contienen un elemento seguro que est\\u00e1 conectado a trav\\u00e9s de un bus SPI no cifrado. Esto podr\\u00eda permitir que un atacante con acceso f\\u00edsico al bus SPI observe la contrase\\u00f1a utilizada para la autenticaci\\u00f3n del elemento seguro y luego utilice el elemento seguro como un or\\u00e1culo para descifrar todos los archivos de actualizaci\\u00f3n cifrados.\"}]",
"id": "CVE-2024-53832",
"lastModified": "2024-12-10T14:30:46.853",
"metrics": "{\"cvssMetricV40\": [{\"source\": \"productcert@siemens.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"4.0\", \"vectorString\": \"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\", \"baseScore\": 5.1, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"vulnerableSystemConfidentiality\": \"HIGH\", \"vulnerableSystemIntegrity\": \"NONE\", \"vulnerableSystemAvailability\": \"NONE\", \"subsequentSystemConfidentiality\": \"NONE\", \"subsequentSystemIntegrity\": \"NONE\", \"subsequentSystemAvailability\": \"NONE\", \"exploitMaturity\": \"NOT_DEFINED\", \"confidentialityRequirements\": \"NOT_DEFINED\", \"integrityRequirements\": \"NOT_DEFINED\", \"availabilityRequirements\": \"NOT_DEFINED\", \"modifiedAttackVector\": \"NOT_DEFINED\", \"modifiedAttackComplexity\": \"NOT_DEFINED\", \"modifiedAttackRequirements\": \"NOT_DEFINED\", \"modifiedPrivilegesRequired\": \"NOT_DEFINED\", \"modifiedUserInteraction\": \"NOT_DEFINED\", \"modifiedVulnerableSystemConfidentiality\": \"NOT_DEFINED\", \"modifiedVulnerableSystemIntegrity\": \"NOT_DEFINED\", \"modifiedVulnerableSystemAvailability\": \"NOT_DEFINED\", \"modifiedSubsequentSystemConfidentiality\": \"NOT_DEFINED\", \"modifiedSubsequentSystemIntegrity\": \"NOT_DEFINED\", \"modifiedSubsequentSystemAvailability\": \"NOT_DEFINED\", \"safety\": \"NOT_DEFINED\", \"automatable\": \"NOT_DEFINED\", \"recovery\": \"NOT_DEFINED\", \"valueDensity\": \"NOT_DEFINED\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\"}}], \"cvssMetricV31\": [{\"source\": \"productcert@siemens.com\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.6, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 0.9, \"impactScore\": 3.6}]}",
"published": "2024-12-10T14:30:46.853",
"references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-128393.html\", \"source\": \"productcert@siemens.com\"}]",
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": "[{\"source\": \"productcert@siemens.com\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-522\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2024-53832\",\"sourceIdentifier\":\"productcert@siemens.com\",\"published\":\"2024-12-10T14:30:46.853\",\"lastModified\":\"2025-11-03T21:17:47.673\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.\"},{\"lang\":\"es\",\"value\":\"Se ha identificado una vulnerabilidad en CPCI85 Central Processing/Communication (Todas las versiones anteriores a V05.30). Los dispositivos afectados contienen un elemento seguro que est\u00e1 conectado a trav\u00e9s de un bus SPI no cifrado. Esto podr\u00eda permitir que un atacante con acceso f\u00edsico al bus SPI observe la contrase\u00f1a utilizada para la autenticaci\u00f3n del elemento seguro y luego utilice el elemento seguro como un or\u00e1culo para descifrar todos los archivos de actualizaci\u00f3n cifrados.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.6,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"productcert@siemens.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-522\"}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-128393.html\",\"source\":\"productcert@siemens.com\"},{\"url\":\"http://seclists.org/fulldisclosure/2025/Feb/19\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://seclists.org/fulldisclosure/2025/Feb/19\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T20:48:25.060Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-53832\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-12-10T15:16:55.369787Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-12-10T15:17:07.852Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 4.6, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\"}}, {\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.1, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\"}}], \"affected\": [{\"vendor\": \"Siemens\", \"product\": \"CPCI85 Central Processing/Communication\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V05.30\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-128393.html\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-522\", \"description\": \"CWE-522: Insufficiently Protected Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"shortName\": \"siemens\", \"dateUpdated\": \"2024-12-10T13:54:14.682Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-53832\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T20:48:25.060Z\", \"dateReserved\": \"2024-11-22T14:39:32.052Z\", \"assignerOrgId\": \"cec7a2ec-15b4-4faf-bd53-b40f371f3a77\", \"datePublished\": \"2024-12-10T13:54:14.682Z\", \"assignerShortName\": \"siemens\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2024-AVI-1062
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SIMATIC STEP 7 V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | TIA Portal Cloud V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC WinCC V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | TIA Portal Cloud V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified PC Runtime V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V17 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC STEP 7 V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified PC Runtime V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | CPCI85 Central Processing/Communication versions antérieures à V05.30 | ||
| Siemens | N/A | SIMATIC STEP 7 V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | TIA Portal Cloud V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SIMATIC STEP 7 V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified PC Runtime V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V17 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified PC Runtime V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "CPCI85 Central Processing/Communication versions ant\u00e9rieures \u00e0 V05.30",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-52051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52051"
},
{
"name": "CVE-2024-53832",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53832"
},
{
"name": "CVE-2024-49849",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49849"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-1062",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-12-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Siemens. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-800126",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-800126.html"
},
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-392859",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-392859.html"
},
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-128393",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
}
]
}
CERTFR-2024-AVI-1062
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Siemens. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Siemens | N/A | SIMATIC STEP 7 V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | TIA Portal Cloud V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC WinCC V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | TIA Portal Cloud V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified PC Runtime V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V17 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC STEP 7 V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified PC Runtime V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V17 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC WinCC Unified V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC S7-PLCSIM V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V19 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V19 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | CPCI85 Central Processing/Communication versions antérieures à V05.30 | ||
| Siemens | N/A | SIMATIC STEP 7 V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. | ||
| Siemens | N/A | TIA Portal Cloud V17 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | SIMATIC WinCC Unified V18 toutes versions pour la vulnérabilité CVE-2024-52051 | ||
| Siemens | N/A | SIMATIC STEP 7 Safety V18 toutes versions pour la vulnérabilité CVE-2024-49849 | ||
| Siemens | N/A | TIA Portal Cloud V16 toutes versions. L'éditeur indique que le produit ne bénéficiera pas de correctif de sécurité pour la vulnérabilité CVE-2024-49849. |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "SIMATIC STEP 7 V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified PC Runtime V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V17 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified PC Runtime V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC S7-PLCSIM V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Soft Starter ES V19 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V18 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V19 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIRIUS Safety ES V17 (TIA Portal) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "CPCI85 Central Processing/Communication versions ant\u00e9rieures \u00e0 V05.30",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V17 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC WinCC Unified V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-52051",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "SIMATIC STEP 7 Safety V18 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
},
{
"description": "TIA Portal Cloud V16 toutes versions. L\u0027\u00e9diteur indique que le produit ne b\u00e9n\u00e9ficiera pas de correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2024-49849.",
"product": {
"name": "N/A",
"vendor": {
"name": "Siemens",
"scada": true
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-52051",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52051"
},
{
"name": "CVE-2024-53832",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-53832"
},
{
"name": "CVE-2024-49849",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49849"
}
],
"links": [],
"reference": "CERTFR-2024-AVI-1062",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-12-11T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Siemens. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens",
"vendor_advisories": [
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-800126",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-800126.html"
},
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-392859",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-392859.html"
},
{
"published_at": "2024-12-10",
"title": "Bulletin de s\u00e9curit\u00e9 Siemens SSA-128393",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
}
]
}
ICSA-24-347-01
Vulnerability from csaf_cisa - Published: 2024-12-10 00:00 - Updated: 2025-05-06 06:00Summary
Siemens CPCI85 Central Processing/Communication
Notes
Summary
The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware.
Siemens has released new firmware and hardware versions for the affected products and recommends to update to the latest versions.
Both the firmware and the hardware update are required to fix the vulnerability. For details see the section "Additional Information".
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Advisory Conversion Disclaimer
This CISA CSAF advisory was converted from Siemens ProductCERT's CSAF advisory.
Critical infrastructure sectors
Critical Manufacturing
Countries/areas deployed
Worldwide
Company headquarters location
Germany
Recommended Practices
CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.
Recommended Practices
Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.
Recommended Practices
Locate control system networks and remote devices behind firewalls and isolate them from business networks.
Recommended Practices
When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.
Recommended Practices
CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.
Recommended Practices
Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.
{
"document": {
"acknowledgments": [
{
"names": [
"Steffen Robertz",
"Gerhard Hechenberger",
"Stefan Viehb\u00f6ck",
"Constantin Schieber-Kn\u00f6bl"
],
"organization": "SEC Consult Vulnerability Lab",
"summary": "reporting this vulnerability to Siemens."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware.\n\nSiemens has released new firmware and hardware versions for the affected products and recommends to update to the latest versions.\nBoth the firmware and the hardware update are required to fix the vulnerability. For details see the section \"Additional Information\".",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. \nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "other",
"text": "This CISA CSAF advisory was converted from Siemens ProductCERT\u0027s CSAF advisory.",
"title": "Advisory Conversion Disclaimer"
},
{
"category": "other",
"text": "Critical Manufacturing",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "Germany",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Locate control system networks and remote devices behind firewalls and isolate them from business networks.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
"title": "Recommended Practices"
}
],
"publisher": {
"category": "other",
"contact_details": "central@cisa.dhs.gov",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-128393.json"
},
{
"category": "self",
"summary": "SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-24-347-01 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-347-01.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-24-347-01 - Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-347-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/topics/industrial-control-systems"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Siemens CPCI85 Central Processing/Communication\u00a0",
"tracking": {
"current_release_date": "2025-05-06T06:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-24-347-01",
"initial_release_date": "2024-12-10T00:00:00.000000Z",
"revision_history": [
{
"date": "2024-12-10T00:00:00.000000Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2025-05-06T06:00:00.000000Z",
"legacy_version": "Revision",
"number": "2",
"summary": "Revision - Fixing typos"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV05.30",
"product": {
"name": "CPCI85 Central Processing/Communication",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "CPCI85 Central Processing/Communication"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-53832",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V05.30 or later version",
"product_ids": [
"CSAFPID-0001"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-0001"
]
}
],
"title": "CVE-2024-53832"
}
]
}
GHSA-PG55-3WRH-JWH5
Vulnerability from github – Published: 2024-12-10 15:32 – Updated: 2025-11-03 21:31
VLAI?
Details
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.
Severity ?
4.6 (Medium)
{
"affected": [],
"aliases": [
"CVE-2024-53832"
],
"database_specific": {
"cwe_ids": [
"CWE-522"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-10T14:30:46Z",
"severity": "MODERATE"
},
"details": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.",
"id": "GHSA-pg55-3wrh-jwh5",
"modified": "2025-11-03T21:31:42Z",
"published": "2024-12-10T15:32:31Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53832"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2025/Feb/19"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"type": "CVSS_V4"
}
]
}
NCSC-2024-0473
Vulnerability from csaf_ncscnl - Published: 2024-12-10 19:34 - Updated: 2024-12-10 19:34Summary
Kwetsbaarheden verholpen in Siemens producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.
Interpretaties
De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Cross-Site-Scripting (XSS)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- Omzeilen van authenticatie
- (Remote) code execution (Administrator/Root rechten)
- (Remote) code execution (Gebruikersrechten)
- Toegang tot systeemgegevens
- Verhoogde gebruikersrechten
De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen
Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-191
Integer Underflow (Wrap or Wraparound)
CWE-522
Insufficiently Protected Credentials
CWE-125
Out-of-bounds Read
CWE-352
Cross-Site Request Forgery (CSRF)
CWE-502
Deserialization of Untrusted Data
CWE-611
Improper Restriction of XML External Entity Reference
CWE-122
Heap-based Buffer Overflow
CWE-121
Stack-based Buffer Overflow
CWE-20
Improper Input Validation
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, RUGGEDCOM, SENTRON, SICAM, SIMATIC en TeamCenter.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorie\u00ebn schade:\n\n- Denial-of-Service (DoS)\n- Cross-Site-Scripting (XSS)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico\u0027s zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
},
{
"category": "general",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
},
{
"category": "general",
"text": "Out-of-bounds Read",
"title": "CWE-125"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
},
{
"category": "general",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
},
{
"category": "general",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-128393.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-384652.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-392859.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-620799.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-645131.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-701627.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-730188.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-800126.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-881356.pdf"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-979056.pdf"
}
],
"title": "Kwetsbaarheden verholpen in Siemens producten",
"tracking": {
"current_release_date": "2024-12-10T19:34:53.515240Z",
"id": "NCSC-2024-0473",
"initial_release_date": "2024-12-10T19:34:53.515240Z",
"revision_history": [
{
"date": "2024-12-10T19:34:53.515240Z",
"number": "0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "comos",
"product": {
"name": "comos",
"product_id": "CSAFPID-396548",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.3",
"product": {
"name": "comos_v10.3",
"product_id": "CSAFPID-1702511",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.3:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.0",
"product": {
"name": "comos_v10.4.0",
"product_id": "CSAFPID-1741068",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.0:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.1",
"product": {
"name": "comos_v10.4.1",
"product_id": "CSAFPID-1741069",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.1:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.2",
"product": {
"name": "comos_v10.4.2",
"product_id": "CSAFPID-1741070",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.2:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.3",
"product": {
"name": "comos_v10.4.3",
"product_id": "CSAFPID-1741071",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.3:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.4.1",
"product": {
"name": "comos_v10.4.4.1",
"product_id": "CSAFPID-1741073",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.4.1:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "comos_v10.4.4",
"product": {
"name": "comos_v10.4.4",
"product_id": "CSAFPID-1741072",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:comos_v10.4.4:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1478257",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741127",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741137",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.10:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741138",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.11:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741139",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.12:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741140",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.13:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741141",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.14:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741142",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.15:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741143",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.16:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741144",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.17:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741145",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.18:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741146",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.19:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741128",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741147",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.20:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741148",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.21:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741149",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.22:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741150",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.23:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741151",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.24:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741152",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.25:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741153",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.26:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741154",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.27:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741155",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.28:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741156",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.29:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741129",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.2:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741130",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.3:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741131",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.4:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741132",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.5:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741133",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.6:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741134",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.7:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741135",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.8:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "cpci85_central_processing_communication",
"product": {
"name": "cpci85_central_processing_communication",
"product_id": "CSAFPID-1741136",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:cpci85_central_processing_communication:05.9:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000",
"product": {
"name": "ruggedcom_rox_mx5000",
"product_id": "CSAFPID-1613204",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_mx5000:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000",
"product": {
"name": "ruggedcom_rox_mx5000",
"product_id": "CSAFPID-1741083",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_mx5000:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000re",
"product": {
"name": "ruggedcom_rox_mx5000re",
"product_id": "CSAFPID-1613205",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_mx5000re:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000re",
"product": {
"name": "ruggedcom_rox_mx5000re",
"product_id": "CSAFPID-1741084",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_mx5000re:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1400",
"product": {
"name": "ruggedcom_rox_rx1400",
"product_id": "CSAFPID-1613206",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1400:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1400",
"product": {
"name": "ruggedcom_rox_rx1400",
"product_id": "CSAFPID-1741085",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1400:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1500",
"product": {
"name": "ruggedcom_rox_rx1500",
"product_id": "CSAFPID-1613207",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1500:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1500",
"product": {
"name": "ruggedcom_rox_rx1500",
"product_id": "CSAFPID-1741086",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1500:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1501",
"product": {
"name": "ruggedcom_rox_rx1501",
"product_id": "CSAFPID-1613208",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1501:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1501",
"product": {
"name": "ruggedcom_rox_rx1501",
"product_id": "CSAFPID-1741087",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1501:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1510",
"product": {
"name": "ruggedcom_rox_rx1510",
"product_id": "CSAFPID-1613209",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1510:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1510",
"product": {
"name": "ruggedcom_rox_rx1510",
"product_id": "CSAFPID-1741088",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1510:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1511",
"product": {
"name": "ruggedcom_rox_rx1511",
"product_id": "CSAFPID-1613210",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1511:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1511",
"product": {
"name": "ruggedcom_rox_rx1511",
"product_id": "CSAFPID-1741089",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1511:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1512",
"product": {
"name": "ruggedcom_rox_rx1512",
"product_id": "CSAFPID-1613211",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1512:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1512",
"product": {
"name": "ruggedcom_rox_rx1512",
"product_id": "CSAFPID-1741090",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1512:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1524",
"product": {
"name": "ruggedcom_rox_rx1524",
"product_id": "CSAFPID-1613212",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1524:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1524",
"product": {
"name": "ruggedcom_rox_rx1524",
"product_id": "CSAFPID-1741091",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1524:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1536",
"product": {
"name": "ruggedcom_rox_rx1536",
"product_id": "CSAFPID-1613213",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1536:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1536",
"product": {
"name": "ruggedcom_rox_rx1536",
"product_id": "CSAFPID-1741092",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx1536:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx5000",
"product": {
"name": "ruggedcom_rox_rx5000",
"product_id": "CSAFPID-1613214",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx5000:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx5000",
"product": {
"name": "ruggedcom_rox_rx5000",
"product_id": "CSAFPID-1741093",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:ruggedcom_rox_rx5000:2.15.1:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sentron_powercenter_1000__7kn1110-0mc00_",
"product": {
"name": "sentron_powercenter_1000__7kn1110-0mc00_",
"product_id": "CSAFPID-1666785",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sentron_powercenter_1000__7kn1110-0mc00_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sentron_powercenter_1100__7kn1111-0mc00_",
"product": {
"name": "sentron_powercenter_1100__7kn1111-0mc00_",
"product_id": "CSAFPID-1741465",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sentron_powercenter_1100__7kn1111-0mc00_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_s7-plcsim",
"product": {
"name": "simatic_s7-plcsim",
"product_id": "CSAFPID-588822",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_s7-plcsim_v16",
"product": {
"name": "simatic_s7-plcsim_v16",
"product_id": "CSAFPID-1712825",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_s7-plcsim_v17",
"product": {
"name": "simatic_s7-plcsim_v17",
"product_id": "CSAFPID-1712826",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_s7-plcsim_v18",
"product": {
"name": "simatic_s7-plcsim_v18",
"product_id": "CSAFPID-1741189",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_s7-plcsim_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7",
"product": {
"name": "simatic_step_7",
"product_id": "CSAFPID-99097",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_safety",
"product": {
"name": "simatic_step_7_safety",
"product_id": "CSAFPID-1713198",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_safety:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_safety_v16",
"product": {
"name": "simatic_step_7_safety_v16",
"product_id": "CSAFPID-1703190",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_safety_v17",
"product": {
"name": "simatic_step_7_safety_v17",
"product_id": "CSAFPID-1703191",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_safety_v18",
"product": {
"name": "simatic_step_7_safety_v18",
"product_id": "CSAFPID-1500667",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_safety_v19",
"product": {
"name": "simatic_step_7_safety_v19",
"product_id": "CSAFPID-1741175",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_safety_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_v16",
"product": {
"name": "simatic_step_7_v16",
"product_id": "CSAFPID-1703187",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_v17",
"product": {
"name": "simatic_step_7_v17",
"product_id": "CSAFPID-1703188",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_v18",
"product": {
"name": "simatic_step_7_v18",
"product_id": "CSAFPID-1703189",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_step_7_v19",
"product": {
"name": "simatic_step_7_v19",
"product_id": "CSAFPID-1741176",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_step_7_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc",
"product": {
"name": "simatic_wincc",
"product_id": "CSAFPID-75563",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified",
"product": {
"name": "simatic_wincc_unified",
"product_id": "CSAFPID-1713199",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_pc_runtime_v18",
"product": {
"name": "simatic_wincc_unified_pc_runtime_v18",
"product_id": "CSAFPID-1637854",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_pc_runtime_v19",
"product": {
"name": "simatic_wincc_unified_pc_runtime_v19",
"product_id": "CSAFPID-1741190",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_pc_runtime_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_v16",
"product": {
"name": "simatic_wincc_unified_v16",
"product_id": "CSAFPID-1703192",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_v17",
"product": {
"name": "simatic_wincc_unified_v17",
"product_id": "CSAFPID-1703193",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_v18",
"product": {
"name": "simatic_wincc_unified_v18",
"product_id": "CSAFPID-1703194",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_unified_v19",
"product": {
"name": "simatic_wincc_unified_v19",
"product_id": "CSAFPID-1741177",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_unified_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_v16",
"product": {
"name": "simatic_wincc_v16",
"product_id": "CSAFPID-1702687",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_v17",
"product": {
"name": "simatic_wincc_v17",
"product_id": "CSAFPID-1702688",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_v18",
"product": {
"name": "simatic_wincc_v18",
"product_id": "CSAFPID-1703195",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simatic_wincc_v19",
"product": {
"name": "simatic_wincc_v19",
"product_id": "CSAFPID-1741178",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simatic_wincc_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_femap_v2306",
"product": {
"name": "simcenter_femap_v2306",
"product_id": "CSAFPID-1703072",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_femap_v2306:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_femap_v2401",
"product": {
"name": "simcenter_femap_v2401",
"product_id": "CSAFPID-1741172",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_femap_v2401:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_femap_v2406",
"product": {
"name": "simcenter_femap_v2406",
"product_id": "CSAFPID-1741173",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_femap_v2406:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran",
"product": {
"name": "simcenter_nastran",
"product_id": "CSAFPID-1741174",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran",
"product": {
"name": "simcenter_nastran",
"product_id": "CSAFPID-1676184",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran:2306.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran",
"product": {
"name": "simcenter_nastran",
"product_id": "CSAFPID-1676183",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran:2312.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran",
"product": {
"name": "simcenter_nastran",
"product_id": "CSAFPID-1676182",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran:2406.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran",
"product": {
"name": "simcenter_nastran",
"product_id": "CSAFPID-1741231",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran:2406.5000:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2306",
"product": {
"name": "simcenter_nastran_2306",
"product_id": "CSAFPID-1504458",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2306:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2306",
"product": {
"name": "simcenter_nastran_2306",
"product_id": "CSAFPID-1478981",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2306:0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2312",
"product": {
"name": "simcenter_nastran_2312",
"product_id": "CSAFPID-1504457",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2312:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2312",
"product": {
"name": "simcenter_nastran_2312",
"product_id": "CSAFPID-1478982",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2312:0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2406",
"product": {
"name": "simcenter_nastran_2406",
"product_id": "CSAFPID-1504459",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2406:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simcenter_nastran_2406",
"product": {
"name": "simcenter_nastran_2406",
"product_id": "CSAFPID-1478983",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simcenter_nastran_2406:0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simocode_es",
"product": {
"name": "simocode_es",
"product_id": "CSAFPID-1713200",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simocode_es:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simocode_es_v16",
"product": {
"name": "simocode_es_v16",
"product_id": "CSAFPID-1702694",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simocode_es_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simocode_es_v17",
"product": {
"name": "simocode_es_v17",
"product_id": "CSAFPID-1703196",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simocode_es_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simocode_es_v18",
"product": {
"name": "simocode_es_v18",
"product_id": "CSAFPID-1703197",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simocode_es_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simocode_es_v19",
"product": {
"name": "simocode_es_v19",
"product_id": "CSAFPID-1741179",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simocode_es_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simotion_scout_tia",
"product": {
"name": "simotion_scout_tia",
"product_id": "CSAFPID-1713201",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simotion_scout_tia:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simotion_scout_tia_v5.4_sp1",
"product": {
"name": "simotion_scout_tia_v5.4_sp1",
"product_id": "CSAFPID-1703198",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp1:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simotion_scout_tia_v5.4_sp3",
"product": {
"name": "simotion_scout_tia_v5.4_sp3",
"product_id": "CSAFPID-1703199",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.4_sp3:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simotion_scout_tia_v5.5_sp1",
"product": {
"name": "simotion_scout_tia_v5.5_sp1",
"product_id": "CSAFPID-1703200",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.5_sp1:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "simotion_scout_tia_v5.6_sp1",
"product": {
"name": "simotion_scout_tia_v5.6_sp1",
"product_id": "CSAFPID-1741180",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:simotion_scout_tia_v5.6_sp1:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sinamics_startdrive",
"product": {
"name": "sinamics_startdrive",
"product_id": "CSAFPID-1625341",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sinamics_startdrive:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sinamics_startdrive_v16",
"product": {
"name": "sinamics_startdrive_v16",
"product_id": "CSAFPID-1703201",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sinamics_startdrive_v17",
"product": {
"name": "sinamics_startdrive_v17",
"product_id": "CSAFPID-1703202",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sinamics_startdrive_v18",
"product": {
"name": "sinamics_startdrive_v18",
"product_id": "CSAFPID-1703203",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sinamics_startdrive_v19",
"product": {
"name": "sinamics_startdrive_v19",
"product_id": "CSAFPID-1741181",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sinamics_startdrive_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_safety_es",
"product": {
"name": "sirius_safety_es",
"product_id": "CSAFPID-1713202",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_safety_es:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_safety_es_v17__tia_portal_",
"product": {
"name": "sirius_safety_es_v17__tia_portal_",
"product_id": "CSAFPID-1741182",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_safety_es_v17__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_safety_es_v18__tia_portal_",
"product": {
"name": "sirius_safety_es_v18__tia_portal_",
"product_id": "CSAFPID-1741183",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_safety_es_v18__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_safety_es_v19__tia_portal_",
"product": {
"name": "sirius_safety_es_v19__tia_portal_",
"product_id": "CSAFPID-1741184",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_safety_es_v19__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_soft_starter_es_v17__tia_portal_",
"product": {
"name": "sirius_soft_starter_es_v17__tia_portal_",
"product_id": "CSAFPID-1741185",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_soft_starter_es_v17__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_soft_starter_es_v18__tia_portal_",
"product": {
"name": "sirius_soft_starter_es_v18__tia_portal_",
"product_id": "CSAFPID-1741186",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_soft_starter_es_v18__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "sirius_soft_starter_es_v19__tia_portal_",
"product": {
"name": "sirius_soft_starter_es_v19__tia_portal_",
"product_id": "CSAFPID-1741187",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:sirius_soft_starter_es_v19__tia_portal_:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solid_edge_se2024",
"product": {
"name": "solid_edge_se2024",
"product_id": "CSAFPID-1680248",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:solid_edge_se2024:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solid_edge_se2024",
"product": {
"name": "solid_edge_se2024",
"product_id": "CSAFPID-1741081",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_10:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "solid_edge_se2024",
"product": {
"name": "solid_edge_se2024",
"product_id": "CSAFPID-1741082",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:solid_edge_se2024:224.0:update_4:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "teamcenter_visualization",
"product": {
"name": "teamcenter_visualization",
"product_id": "CSAFPID-342619",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "teamcenter_visualization_v14.2",
"product": {
"name": "teamcenter_visualization_v14.2",
"product_id": "CSAFPID-1615270",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:teamcenter_visualization_v14.2:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "teamcenter_visualization_v14.3",
"product": {
"name": "teamcenter_visualization_v14.3",
"product_id": "CSAFPID-1615271",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:teamcenter_visualization_v14.3:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "teamcenter_visualization_v2312",
"product": {
"name": "teamcenter_visualization_v2312",
"product_id": "CSAFPID-1615272",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:teamcenter_visualization_v2312:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "teamcenter_visualization_v2406",
"product": {
"name": "teamcenter_visualization_v2406",
"product_id": "CSAFPID-1666832",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:teamcenter_visualization_v2406:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-166120",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1220770",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1741221",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0016:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1727493",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0018:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-820358",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2302.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1673843",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2303.0000:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1676081",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2403.0000:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1741220",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0005:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1727496",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0007:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1643856",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:2404.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1727495",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:v2302.0018:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation",
"product": {
"name": "tecnomatix_plant_simulation",
"product_id": "CSAFPID-1727494",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation:v2404.0007:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation_v2302",
"product": {
"name": "tecnomatix_plant_simulation_v2302",
"product_id": "CSAFPID-1637816",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation_v2302",
"product": {
"name": "tecnomatix_plant_simulation_v2302",
"product_id": "CSAFPID-1465025",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2302:0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation_v2404",
"product": {
"name": "tecnomatix_plant_simulation_v2404",
"product_id": "CSAFPID-1637817",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tecnomatix_plant_simulation_v2404",
"product": {
"name": "tecnomatix_plant_simulation_v2404",
"product_id": "CSAFPID-1476361",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tecnomatix_plant_simulation_v2404:0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tia_portal_cloud",
"product": {
"name": "tia_portal_cloud",
"product_id": "CSAFPID-1713204",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tia_portal_cloud:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tia_portal_cloud_v16",
"product": {
"name": "tia_portal_cloud_v16",
"product_id": "CSAFPID-1712827",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v16:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tia_portal_cloud_v17",
"product": {
"name": "tia_portal_cloud_v17",
"product_id": "CSAFPID-1712828",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v17:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tia_portal_cloud_v18",
"product": {
"name": "tia_portal_cloud_v18",
"product_id": "CSAFPID-1712829",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v18:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "tia_portal_cloud_v19",
"product": {
"name": "tia_portal_cloud_v19",
"product_id": "CSAFPID-1741188",
"product_identification_helper": {
"cpe": "cpe:2.3:a:siemens:tia_portal_cloud_v19:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000",
"product": {
"name": "ruggedcom_rox_mx5000",
"product_id": "CSAFPID-77041",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_mx5000:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_mx5000re",
"product": {
"name": "ruggedcom_rox_mx5000re",
"product_id": "CSAFPID-540801",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_mx5000re:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1400",
"product": {
"name": "ruggedcom_rox_rx1400",
"product_id": "CSAFPID-77038",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1400:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1500",
"product": {
"name": "ruggedcom_rox_rx1500",
"product_id": "CSAFPID-77043",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1500:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1501",
"product": {
"name": "ruggedcom_rox_rx1501",
"product_id": "CSAFPID-77042",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1501:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1510",
"product": {
"name": "ruggedcom_rox_rx1510",
"product_id": "CSAFPID-77035",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1510:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1511",
"product": {
"name": "ruggedcom_rox_rx1511",
"product_id": "CSAFPID-77039",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1511:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1512",
"product": {
"name": "ruggedcom_rox_rx1512",
"product_id": "CSAFPID-77037",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1512:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1524",
"product": {
"name": "ruggedcom_rox_rx1524",
"product_id": "CSAFPID-77040",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1524:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx1536",
"product": {
"name": "ruggedcom_rox_rx1536",
"product_id": "CSAFPID-77036",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx1536:-:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_name",
"name": "ruggedcom_rox_rx5000",
"product": {
"name": "ruggedcom_rox_rx5000",
"product_id": "CSAFPID-77034",
"product_identification_helper": {
"cpe": "cpe:2.3:h:siemens:ruggedcom_rox_rx5000:-:*:*:*:*:*:*:*"
}
}
}
],
"category": "vendor",
"name": "siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2020-28398",
"cwe": {
"id": "CWE-352",
"name": "Cross-Site Request Forgery (CSRF)"
},
"notes": [
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1613204",
"CSAFPID-1613205",
"CSAFPID-1613206",
"CSAFPID-1613207",
"CSAFPID-1613208",
"CSAFPID-1613209",
"CSAFPID-1613210",
"CSAFPID-1613211",
"CSAFPID-1613212",
"CSAFPID-1613213",
"CSAFPID-1613214",
"CSAFPID-77041",
"CSAFPID-540801",
"CSAFPID-77038",
"CSAFPID-77043",
"CSAFPID-77042",
"CSAFPID-77035",
"CSAFPID-77039",
"CSAFPID-77037",
"CSAFPID-77040",
"CSAFPID-77036",
"CSAFPID-77034"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2020-28398",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2020/CVE-2020-28398.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"CSAFPID-1613204",
"CSAFPID-1613205",
"CSAFPID-1613206",
"CSAFPID-1613207",
"CSAFPID-1613208",
"CSAFPID-1613209",
"CSAFPID-1613210",
"CSAFPID-1613211",
"CSAFPID-1613212",
"CSAFPID-1613213",
"CSAFPID-1613214",
"CSAFPID-77041",
"CSAFPID-540801",
"CSAFPID-77038",
"CSAFPID-77043",
"CSAFPID-77042",
"CSAFPID-77035",
"CSAFPID-77039",
"CSAFPID-77037",
"CSAFPID-77040",
"CSAFPID-77036",
"CSAFPID-77034"
]
}
],
"title": "CVE-2020-28398"
},
{
"cve": "CVE-2024-6657",
"cwe": {
"id": "CWE-821",
"name": "Incorrect Synchronization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Synchronization",
"title": "CWE-821"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1666785",
"CSAFPID-1741465"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-6657",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6657.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1666785",
"CSAFPID-1741465"
]
}
],
"title": "CVE-2024-6657"
},
{
"cve": "CVE-2024-41981",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1478981",
"CSAFPID-1478982",
"CSAFPID-1478983",
"CSAFPID-1504458",
"CSAFPID-1504457",
"CSAFPID-1504459",
"CSAFPID-1703072",
"CSAFPID-1741172",
"CSAFPID-1741173",
"CSAFPID-1741174"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-41981",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-41981.json"
}
],
"title": "CVE-2024-41981"
},
{
"cve": "CVE-2024-45463",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45463",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45463.json"
}
],
"title": "CVE-2024-45463"
},
{
"cve": "CVE-2024-45464",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45464",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45464.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45464"
},
{
"cve": "CVE-2024-45465",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45465",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45465.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45465"
},
{
"cve": "CVE-2024-45466",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45466",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45466.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45466"
},
{
"cve": "CVE-2024-45467",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45467",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45467.json"
}
],
"title": "CVE-2024-45467"
},
{
"cve": "CVE-2024-45468",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45468",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45468.json"
}
],
"title": "CVE-2024-45468"
},
{
"cve": "CVE-2024-45469",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45469",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45469.json"
}
],
"title": "CVE-2024-45469"
},
{
"cve": "CVE-2024-45470",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45470",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45470.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45470"
},
{
"cve": "CVE-2024-45471",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45471",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45471.json"
}
],
"title": "CVE-2024-45471"
},
{
"cve": "CVE-2024-45472",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45472",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45472.json"
}
],
"title": "CVE-2024-45472"
},
{
"cve": "CVE-2024-45473",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45473",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45473.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45473"
},
{
"cve": "CVE-2024-45474",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45474",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45474.json"
}
],
"title": "CVE-2024-45474"
},
{
"cve": "CVE-2024-45475",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45475",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45475.json"
}
],
"title": "CVE-2024-45475"
},
{
"cve": "CVE-2024-45476",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-45476",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45476.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1465025",
"CSAFPID-1476361",
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272"
]
}
],
"title": "CVE-2024-45476"
},
{
"cve": "CVE-2024-47046",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
"title": "CWE-119"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1478981",
"CSAFPID-1478982",
"CSAFPID-1478983",
"CSAFPID-1504458",
"CSAFPID-1504457",
"CSAFPID-1504459",
"CSAFPID-1703072",
"CSAFPID-1741172",
"CSAFPID-1741173",
"CSAFPID-1741174"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-47046",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47046.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1478981",
"CSAFPID-1478982",
"CSAFPID-1478983",
"CSAFPID-1504458",
"CSAFPID-1504457",
"CSAFPID-1504459",
"CSAFPID-1703072",
"CSAFPID-1741172",
"CSAFPID-1741173",
"CSAFPID-1741174"
]
}
],
"title": "CVE-2024-47046"
},
{
"cve": "CVE-2024-49704",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1702511",
"CSAFPID-1741068",
"CSAFPID-1741069",
"CSAFPID-1741070",
"CSAFPID-1741071",
"CSAFPID-1741072",
"CSAFPID-1741073",
"CSAFPID-396548"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-49704",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49704.json"
}
],
"title": "CVE-2024-49704"
},
{
"cve": "CVE-2024-49849",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"notes": [
{
"category": "other",
"text": "Deserialization of Untrusted Data",
"title": "CWE-502"
}
],
"product_status": {
"known_affected": [
"CSAFPID-99097",
"CSAFPID-75563",
"CSAFPID-1713199",
"CSAFPID-1625341",
"CSAFPID-1713202",
"CSAFPID-1713204",
"CSAFPID-1712825",
"CSAFPID-1712826",
"CSAFPID-1703190",
"CSAFPID-1703191",
"CSAFPID-1500667",
"CSAFPID-1741175",
"CSAFPID-1703187",
"CSAFPID-1703188",
"CSAFPID-1703189",
"CSAFPID-1741176",
"CSAFPID-1703192",
"CSAFPID-1703193",
"CSAFPID-1703194",
"CSAFPID-1741177",
"CSAFPID-1702687",
"CSAFPID-1702688",
"CSAFPID-1703195",
"CSAFPID-1741178",
"CSAFPID-1702694",
"CSAFPID-1703196",
"CSAFPID-1703197",
"CSAFPID-1741179",
"CSAFPID-1703198",
"CSAFPID-1703199",
"CSAFPID-1703200",
"CSAFPID-1741180",
"CSAFPID-1703201",
"CSAFPID-1703202",
"CSAFPID-1703203",
"CSAFPID-1741181",
"CSAFPID-1741182",
"CSAFPID-1741183",
"CSAFPID-1741184",
"CSAFPID-1741185",
"CSAFPID-1741186",
"CSAFPID-1741187",
"CSAFPID-1712827",
"CSAFPID-1712828",
"CSAFPID-1712829",
"CSAFPID-1741188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-49849",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-49849.json"
}
],
"title": "CVE-2024-49849"
},
{
"cve": "CVE-2024-52051",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-99097",
"CSAFPID-75563",
"CSAFPID-1713199",
"CSAFPID-1625341",
"CSAFPID-1713202",
"CSAFPID-1713204",
"CSAFPID-1712826",
"CSAFPID-1741189",
"CSAFPID-1703191",
"CSAFPID-1500667",
"CSAFPID-1741175",
"CSAFPID-1703188",
"CSAFPID-1703189",
"CSAFPID-1741176",
"CSAFPID-1637854",
"CSAFPID-1741190",
"CSAFPID-1703193",
"CSAFPID-1703194",
"CSAFPID-1741177",
"CSAFPID-1702688",
"CSAFPID-1703195",
"CSAFPID-1741178",
"CSAFPID-1703196",
"CSAFPID-1703197",
"CSAFPID-1741179",
"CSAFPID-1703199",
"CSAFPID-1703200",
"CSAFPID-1741180",
"CSAFPID-1703202",
"CSAFPID-1703203",
"CSAFPID-1741181",
"CSAFPID-1741182",
"CSAFPID-1741183",
"CSAFPID-1741184",
"CSAFPID-1741185",
"CSAFPID-1741186",
"CSAFPID-1741187",
"CSAFPID-1712828",
"CSAFPID-1712829",
"CSAFPID-1741188"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52051",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52051.json"
}
],
"title": "CVE-2024-52051"
},
{
"cve": "CVE-2024-52565",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52565",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52565.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52565"
},
{
"cve": "CVE-2024-52566",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52566",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52566.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52566"
},
{
"cve": "CVE-2024-52567",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1220770",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52567",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52567.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1220770",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52567"
},
{
"cve": "CVE-2024-52568",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1220770",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52568",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52568.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1220770",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52568"
},
{
"cve": "CVE-2024-52569",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52569",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52569.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52569"
},
{
"cve": "CVE-2024-52570",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52570",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52570.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-1220770",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52570"
},
{
"cve": "CVE-2024-52571",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52571",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52571.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52571"
},
{
"cve": "CVE-2024-52572",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52572",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52572.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52572"
},
{
"cve": "CVE-2024-52573",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52573",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52573.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52573"
},
{
"cve": "CVE-2024-52574",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-52574",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52574.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1637816",
"CSAFPID-1637817",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1666832"
]
}
],
"title": "CVE-2024-52574"
},
{
"cve": "CVE-2024-53041",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
}
],
"product_status": {
"known_affected": [
"CSAFPID-342619",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1637816",
"CSAFPID-1637817"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-53041",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53041.json"
}
],
"title": "CVE-2024-53041"
},
{
"cve": "CVE-2024-53242",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Read",
"title": "CWE-125"
}
],
"product_status": {
"known_affected": [
"CSAFPID-342619",
"CSAFPID-166120",
"CSAFPID-1615270",
"CSAFPID-1615271",
"CSAFPID-1615272",
"CSAFPID-1637816",
"CSAFPID-1637817"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-53242",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53242.json"
}
],
"title": "CVE-2024-53242"
},
{
"cve": "CVE-2024-53832",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "other",
"text": "Insufficiently Protected Credentials",
"title": "CWE-522"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1478257"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-53832",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53832.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1478257"
]
}
],
"title": "CVE-2024-53832"
},
{
"cve": "CVE-2024-54005",
"cwe": {
"id": "CWE-611",
"name": "Improper Restriction of XML External Entity Reference"
},
"notes": [
{
"category": "other",
"text": "Improper Restriction of XML External Entity Reference",
"title": "CWE-611"
}
],
"product_status": {
"known_affected": [
"CSAFPID-396548",
"CSAFPID-1702511",
"CSAFPID-1741068",
"CSAFPID-1741069",
"CSAFPID-1741070",
"CSAFPID-1741071",
"CSAFPID-1741072",
"CSAFPID-1741073"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54005",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54005.json"
}
],
"title": "CVE-2024-54005"
},
{
"cve": "CVE-2024-54093",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1680248"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54093",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54093.json"
}
],
"title": "CVE-2024-54093"
},
{
"cve": "CVE-2024-54094",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Heap-based Buffer Overflow",
"title": "CWE-122"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1680248"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54094",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54094.json"
}
],
"title": "CVE-2024-54094"
},
{
"cve": "CVE-2024-54095",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"notes": [
{
"category": "other",
"text": "Integer Underflow (Wrap or Wraparound)",
"title": "CWE-191"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1680248"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-54095",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54095.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1680248"
]
}
],
"title": "CVE-2024-54095"
}
]
}
SSA-128393
Vulnerability from csaf_siemens - Published: 2024-12-10 00:00 - Updated: 2024-12-10 00:00Summary
SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050
Notes
Summary
The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware.
Siemens has released new firmware and hardware versions for the affected products and recommends to update to the latest versions.
Both the firmware and the hardware update are required to fix the vulnerability. For details see the section "Additional Information".
General Recommendations
Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid's reliability can thus be minimized by virtue of the grid design.
Siemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment.
As a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.
Recommended security guidelines can be found at:
https://www.siemens.com/gridsecurity
Additional Resources
For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use
The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The SICAM A8000 CP-8031 and CP-8050 devices are affected by a vulnerability that could allow an attacker with physical access to the device to decrypt the firmware.\n\nSiemens has released new firmware and hardware versions for the affected products and recommends to update to the latest versions.\nBoth the firmware and the hardware update are required to fix the vulnerability. For details see the section \"Additional Information\".",
"title": "Summary"
},
{
"category": "general",
"text": "Operators of critical power systems (e.g. TSOs or DSOs) worldwide are usually required by regulations to build resilience into the power grids by applying multi-level redundant secondary protection schemes. It is therefore recommended that the operators check whether appropriate resilient protection measures are in place. The risk of cyber incidents impacting the grid\u0027s reliability can thus be minimized by virtue of the grid design.\nSiemens strongly recommends applying the provided security updates using the corresponding tooling and documented procedures made available with the product. If supported by the product, an automated means to apply the security updates across multiple product instances may be used. Siemens strongly recommends prior validation of any security update before being applied, and supervision by trained staff of the update process in the target environment. \nAs a general security measure Siemens strongly recommends to protect network access with appropriate mechanisms (e.g. firewalls, segmentation, VPN). It is advised to configure the environment according to our operational guidelines in order to run the devices in a protected IT environment.\n\nRecommended security guidelines can be found at:\n\nhttps://www.siemens.com/gridsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
},
{
"category": "self",
"summary": "SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-128393.json"
}
],
"title": "SSA-128393: Firmware Decryption Vulnerability in SICAM A8000 CP-8031 and CP-8050",
"tracking": {
"current_release_date": "2024-12-10T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-128393",
"initial_release_date": "2024-12-10T00:00:00Z",
"revision_history": [
{
"date": "2024-12-10T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "interim",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:all/\u003cV05.30",
"product": {
"name": "CPCI85 Central Processing/Communication",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "CPCI85 Central Processing/Communication"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-53832",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V05.30 or later version",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2024-53832"
}
]
}
FKIE_CVE-2024-53832
Vulnerability from fkie_nvd - Published: 2024-12-10 14:30 - Updated: 2025-11-03 21:17
Severity ?
Summary
A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions \u003c V05.30). The affected devices contain a secure element which is connected via an unencrypted SPI bus. This could allow an attacker with physical access to the SPI bus to observe the password used for the secure element authentication, and then use the secure element as an oracle to decrypt all encrypted update files."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en CPCI85 Central Processing/Communication (Todas las versiones anteriores a V05.30). Los dispositivos afectados contienen un elemento seguro que est\u00e1 conectado a trav\u00e9s de un bus SPI no cifrado. Esto podr\u00eda permitir que un atacante con acceso f\u00edsico al bus SPI observe la contrase\u00f1a utilizada para la autenticaci\u00f3n del elemento seguro y luego utilice el elemento seguro como un or\u00e1culo para descifrar todos los archivos de actualizaci\u00f3n cifrados."
}
],
"id": "CVE-2024-53832",
"lastModified": "2025-11-03T21:17:47.673",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6,
"source": "productcert@siemens.com",
"type": "Secondary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "productcert@siemens.com",
"type": "Secondary"
}
]
},
"published": "2024-12-10T14:30:46.853",
"references": [
{
"source": "productcert@siemens.com",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://seclists.org/fulldisclosure/2025/Feb/19"
}
],
"sourceIdentifier": "productcert@siemens.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-522"
}
],
"source": "productcert@siemens.com",
"type": "Secondary"
}
]
}
WID-SEC-W-2024-3655
Vulnerability from csaf_certbund - Published: 2024-12-10 23:00 - Updated: 2024-12-10 23:00Summary
Siemens SICAM: Schwachstelle ermöglicht Offenlegung von Informationen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Siemens SICAM ist eine Produktfamilie von SCADA-Systemen für den Betrieb von industriellen Prozessen.
Angriff
Ein Angreifer mit physischem Zugriff kann eine Schwachstelle in Siemens SICAM ausnutzen, um Informationen offenzulegen.
Betroffene Betriebssysteme
- Hardware Appliance
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Siemens SICAM ist eine Produktfamilie von SCADA-Systemen f\u00fcr den Betrieb von industriellen Prozessen.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer mit physischem Zugriff kann eine Schwachstelle in Siemens SICAM ausnutzen, um Informationen offenzulegen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Hardware Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2024-3655 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3655.json"
},
{
"category": "self",
"summary": "WID-SEC-2024-3655 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3655"
},
{
"category": "external",
"summary": "Siemens Security Advisory SSA-128393 vom 2024-12-10",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html"
}
],
"source_lang": "en-US",
"title": "Siemens SICAM: Schwachstelle erm\u00f6glicht Offenlegung von Informationen",
"tracking": {
"current_release_date": "2024-12-10T23:00:00.000+00:00",
"generator": {
"date": "2024-12-11T10:42:00.207+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.10"
}
},
"id": "WID-SEC-W-2024-3655",
"initial_release_date": "2024-12-10T23:00:00.000+00:00",
"revision_history": [
{
"date": "2024-12-10T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV05.30",
"product": {
"name": "Siemens SICAM \u003cV05.30",
"product_id": "T039677"
}
},
{
"category": "product_version",
"name": "V05.30",
"product": {
"name": "Siemens SICAM V05.30",
"product_id": "T039677-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:siemens:sicam:v05.30"
}
}
}
],
"category": "product_name",
"name": "SICAM"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-53832",
"notes": [
{
"category": "description",
"text": "Es besteht eine Schwachstelle in Siemens SICAM. Diese Schwachstelle besteht aufgrund eines unzureichenden Schutzes der Anmeldeinformationen auf dem SPI-Bus. Ein Angreifer mit physischem Zugang kann diese Schwachstelle ausnutzen, um das f\u00fcr das sichere Element verwendete Kennwort abzufangen und es zur Entschl\u00fcsselung verschl\u00fcsselter Aktualisierungsdateien zu missbrauchen."
}
],
"product_status": {
"known_affected": [
"T039677"
]
},
"release_date": "2024-12-10T23:00:00.000+00:00",
"title": "CVE-2024-53832"
}
]
}
CNVD-2024-47915
Vulnerability from cnvd - Published: 2024-12-12
VLAI Severity ?
Title
Siemens SICAM A8000 CP-8031和CP-8050固件解密漏洞
Description
SICAM A8000 RTU（远程终端单元）是用于所有能源供应领域的远程控制和自动化应用的模块化设备。
Siemens SICAM A8000 CP-8031和CP-8050存在固件解密漏洞，该漏洞是由于受影响的设备包含一个通过未加密的SPI总线连接的安全元件。攻击者可利用该漏洞观察用于安全元件身份验证的密码，然后将安全元件用作预言机来解密所有加密的更新文件。
Severity
中
Patch Name
Siemens SICAM A8000 CP-8031和CP-8050固件解密漏洞的补丁
Patch Description
SICAM A8000 RTU（远程终端单元）是用于所有能源供应领域的远程控制和自动化应用的模块化设备。
Siemens SICAM A8000 CP-8031和CP-8050存在固件解密漏洞，该漏洞是由于受影响的设备包含一个通过未加密的SPI总线连接的安全元件。攻击者可利用该漏洞观察用于安全元件身份验证的密码，然后将安全元件用作预言机来解密所有加密的更新文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
用户可参考如下供应商提供的安全公告获得补丁信息： https://cert-portal.siemens.com/productcert/html/ssa-128393.html
Reference
https://cert-portal.siemens.com/productcert/html/ssa-128393.html
Impacted products
| Name | Siemens CPCI85 Central Processing/Communication <V05.30 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2024-53832"
}
},
"description": "SICAM A8000 RTU\uff08\u8fdc\u7a0b\u7ec8\u7aef\u5355\u5143\uff09\u662f\u7528\u4e8e\u6240\u6709\u80fd\u6e90\u4f9b\u5e94\u9886\u57df\u7684\u8fdc\u7a0b\u63a7\u5236\u548c\u81ea\u52a8\u5316\u5e94\u7528\u7684\u6a21\u5757\u5316\u8bbe\u5907\u3002\n\nSiemens SICAM A8000 CP-8031\u548cCP-8050\u5b58\u5728\u56fa\u4ef6\u89e3\u5bc6\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5305\u542b\u4e00\u4e2a\u901a\u8fc7\u672a\u52a0\u5bc6\u7684SPI\u603b\u7ebf\u8fde\u63a5\u7684\u5b89\u5168\u5143\u4ef6\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u89c2\u5bdf\u7528\u4e8e\u5b89\u5168\u5143\u4ef6\u8eab\u4efd\u9a8c\u8bc1\u7684\u5bc6\u7801\uff0c\u7136\u540e\u5c06\u5b89\u5168\u5143\u4ef6\u7528\u4f5c\u9884\u8a00\u673a\u6765\u89e3\u5bc6\u6240\u6709\u52a0\u5bc6\u7684\u66f4\u65b0\u6587\u4ef6\u3002",
"formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-128393.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2024-47915",
"openTime": "2024-12-12",
"patchDescription": "SICAM A8000 RTU\uff08\u8fdc\u7a0b\u7ec8\u7aef\u5355\u5143\uff09\u662f\u7528\u4e8e\u6240\u6709\u80fd\u6e90\u4f9b\u5e94\u9886\u57df\u7684\u8fdc\u7a0b\u63a7\u5236\u548c\u81ea\u52a8\u5316\u5e94\u7528\u7684\u6a21\u5757\u5316\u8bbe\u5907\u3002\r\n\r\nSiemens SICAM A8000 CP-8031\u548cCP-8050\u5b58\u5728\u56fa\u4ef6\u89e3\u5bc6\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u53d7\u5f71\u54cd\u7684\u8bbe\u5907\u5305\u542b\u4e00\u4e2a\u901a\u8fc7\u672a\u52a0\u5bc6\u7684SPI\u603b\u7ebf\u8fde\u63a5\u7684\u5b89\u5168\u5143\u4ef6\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u89c2\u5bdf\u7528\u4e8e\u5b89\u5168\u5143\u4ef6\u8eab\u4efd\u9a8c\u8bc1\u7684\u5bc6\u7801\uff0c\u7136\u540e\u5c06\u5b89\u5168\u5143\u4ef6\u7528\u4f5c\u9884\u8a00\u673a\u6765\u89e3\u5bc6\u6240\u6709\u52a0\u5bc6\u7684\u66f4\u65b0\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Siemens SICAM A8000 CP-8031\u548cCP-8050\u56fa\u4ef6\u89e3\u5bc6\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Siemens CPCI85 Central Processing/Communication \u003cV05.30"
},
"referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-128393.html",
"serverity": "\u4e2d",
"submitTime": "2024-12-11",
"title": "Siemens SICAM A8000 CP-8031\u548cCP-8050\u56fa\u4ef6\u89e3\u5bc6\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…