SIDIS Prime vulnerabilities

9 known vulnerabilities in SIDIS Prime from Siemens. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  angular: Insertion of Sensitive Information Into Sent Data

  CVE-2025-66035Nov 26, 2025Angular

  Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients

• 9.8 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2025-9230Sep 30, 2025OpenSSLEPSS 1.78%

  Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application.

• 7.7 High severity

  SQLite: Numeric Truncation Error

  CVE-2025-6965Jul 15, 2025SQLiteEPSS 73.5%

  There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

• 8.8 High severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-9143Oct 16, 2024OpenSSLEPSS 12.5%

  Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound memory writes can lead to an application crash or even a poss

• 7.5 High severity

  diffie-hellman_key_exchange: Improper Certificate Validation

  CVE-2024-41996Aug 26, 2024Diffie-hellman Key Exchange ProjectEPSS 1.07%

  Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. Th

• 9.1 Critical severity

  OpenSSL: Out-of-bounds Read

  CVE-2024-5535Jun 27, 2024OpenSSLEPSS 6.13%

  Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such

• 7.3 High severity

  SQLite3: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-7104Dec 29, 2023SQLiteEPSS 1.46%

  A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer o

• 7.5 High severity

  OpenSSL: Incorrect Provision of Specified Functionality

  CVE-2023-5363Oct 25, 2023OpenSSLEPSS 3.94%

  Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers. Impact summary: A truncation in the IV can result i

• 7.8 High severity

  OpenSSL: Expected Behavior Violation

  CVE-2023-4807Sep 8, 2023OpenSSLEPSS 1.58%

  Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impact