Siemens Alert
2739Warning Date
Severity Level
Warning Number
Target Sector
14 March, 2023
● Critical
2023-5500
All
Siemens has released security updates to address multiple vulnerabilities in the following products:
- Mendix SAML
- SIPROTEC 5
- SCALANCE
- RUGGEDCOM
An attacker could exploit these vulnerabilities and achieve the following:
- Authentication bypass
- Denial of Service (DoS)
- Memory Corruption
- Remote code execution
- SQL Injection
The CERT team encourages users to update affected products and review Siemens security advisory:
- https://cert-portal.siemens.com/productcert/html/ssa-851884.html
- https://cert-portal.siemens.com/productcert/html/ssa-726834.html
- https://cert-portal.siemens.com/productcert/html/ssa-565386.html
- https://cert-portal.siemens.com/productcert/html/ssa-419740.html
- https://cert-portal.siemens.com/productcert/html/ssa-320629.html
- https://cert-portal.siemens.com/productcert/html/ssa-203374.html