Siemens Alert
2799Warning Date
Severity Level
Warning Number
Target Sector
14 September, 2022
● High
2022-5241
All
Siemens has released security alerts to address several vulnerabilities in the following products:
- Mendix SAML Module (Mendix 7 compatible) All versions < V1.17.0
- Mendix SAML Module (Mendix 8 compatible) All versions < V2.3.0
- Mendix SAML Module (Mendix 9 compatible) All versions < V3.3.1
- SINEC INS All versions < V1.0 SP2
- CoreShield One-Way Gateway (OWG) Software All versions < V2.2
- Parasolid V33.1 All versions < V33.1.262
- Parasolid V33.1 All versions >= V33.1.262 < V33.1.263
- Parasolid V34.0 All versions < V34.0.252
- Parasolid V34.1 All versions < V34.1.242
- Parasolid V35.0 All versions < V35.0.161
- Parasolid V35.0 All versions >= V35.0.161 < V35.0.164
- Simcenter Femap V2022.1 All versions < V2022.1.3
- Simcenter Femap V2022.2 All versions < V2022.2.2
Attacker could exploit these vulnerabilities by doing the following:
- Authentication bypass
- Denial of service attack (DoS)
- Buffer overflow
- Server-side request forgery (SSRF)
The CERT team encourages users to review Amazon security advisory: