Seimens vulnerabilities
We track 5 vulnerabilities in Seimens products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2024.
Latest Seimens vulnerabilities
- 7.5 High severity
SINEC INS: Uncontrolled Resource Consumption
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged ev
- 9.1 Critical severity
SINEC INS: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on
- 9.9 Critical severity
SINEC INS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate
- 7.8 High severity
Solid Edge SE2023: Use After Free
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability that could be triggered while parsing specially crafted DWG file. An attacker could leverage this vulner
- 7.8 High severity
Solid Edge SE2023: Out-of-bounds Write
A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker t