Siemens NX
Siemens NX is affected by missing data validation vulnerability that could allow an attacker with local access on a compromised system to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution. Siemens has released a new version of NX which resolves the data tampering vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-22923US | — | — | ||
A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that c… | ||||
references
External citations — patches, advisories, analysis.
- SSA-535115: Data Validation Vulnerability in NX Before V2512 - CSAF Versionself
- SSA-535115: Data Validation Vulnerability in NX Before V2512 - HTML Versionself
- ICS Advisory ICSA-26-043-08 JSONself
- ICS Advisory ICSA-26-043-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationNX
Prioritize strong overall system hygiene to prevent initial system infection which includes maintaining fully patched systems, robust endpoint security, and continuous monitoring for signs of compromise
- MitigationNX (Managed Mode)
Prioritize strong overall system hygiene to prevent initial system infection which includes maintaining fully patched systems, robust endpoint security, and continuous monitoring for signs of compromise
- FixedNX
Update to V2512 or later version
https://support.sw.siemens.com/product/209349590/ - FixedNX (Managed Mode)
Update to V2512 or later version
https://support.sw.siemens.com/product/209349590/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan