Siemens SIDIS Secured SmartPlug
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-5121US | — | — | ||
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by prov… | ||||
| CVE-2025-9232US | — | — | ||
Issue summary: An application using the OpenSSL HTTP client API functions may
trigger an out-of-bounds read if the 'no_proxy' environment variable is set and
the host portion of th… | ||||
| CVE-2025-9231US | — | — | ||
Issue summary: A timing side-channel which could potentially allow remote
recovery of the private key exists in the SM2 algorithm implementation on 64 bit
ARM platforms.
Impact su… | ||||
| CVE-2025-9230US | — | — | ||
Issue summary: An application trying to decrypt CMS messages encrypted using
password based encryption can trigger an out-of-bounds read and write.
Impact summary: This out-of-bou… | ||||
| CVE-2025-32462US | high8.8OT high | Exploit | ||
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. | ||||
| CVE-2025-5914US | high7.8 | — | ||
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can… | ||||
| CVE-2025-5222US | — | Exploit | ||
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. Thi… | ||||
| CVE-2025-26465US | medium6.8 | Exploit | ||
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit serve… | ||||
| CVE-2022-37660US | —OT elevated | — | ||
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using… | ||||
| CVE-2022-48174US | critical9.8 | — | ||
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitra… | ||||
| CVE-2022-23304US | critical9.8 | — | ||
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue e… | ||||
| CVE-2022-23303US | critical9.8 | Exploit | ||
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exist… | ||||
references
External citations — patches, advisories, analysis.
- SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 - CSAF Versionself
- SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 - HTML Versionself
- ICS Advisory ICSA-26-202-04 JSONself
- ICS Advisory ICSA-26-202-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan