OZW672 vulnerabilities

2 known vulnerabilities in OZW672 from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OZW672: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-26390May 13, 2025Siemens

  A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypa

• 9.8 Critical severity

  OZW672: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-26389May 13, 2025Siemens

  A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated rem