SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310
SIDIS Secured SmartPlug before V7.26.0310 is affected by multiple vulnerabilities in the components OpenSSL, OpenSSH, and several other packages as described below. Siemens has released a new version of SIDIS Secured SmartPlug and recommends to update to the latest version.
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-5121US | — | — | ||
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by prov… | ||||
| CVE-2025-9232US | — | — | ||
Issue summary: An application using the OpenSSL HTTP client API functions may
trigger an out-of-bounds read if the 'no_proxy' environment variable is set and
the host portion of th… | ||||
| CVE-2025-9231US | — | — | ||
Issue summary: A timing side-channel which could potentially allow remote
recovery of the private key exists in the SM2 algorithm implementation on 64 bit
ARM platforms.
Impact su… | ||||
| CVE-2025-9230US | — | — | ||
Issue summary: An application trying to decrypt CMS messages encrypted using
password based encryption can trigger an out-of-bounds read and write.
Impact summary: This out-of-bou… | ||||
| CVE-2025-32462US | high8.8OT high | Exploit | ||
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. | ||||
| CVE-2025-5914US | high7.8 | — | ||
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can… | ||||
| CVE-2025-5222US | — | Exploit | ||
A stack buffer overflow was found in Internationl components for unicode (ICU ). While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag function. Thi… | ||||
| CVE-2025-26465US | medium6.8 | Exploit | ||
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit serve… | ||||
| CVE-2022-37660US | —OT elevated | — | ||
In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using… | ||||
| CVE-2022-48174US | critical9.8 | — | ||
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitra… | ||||
| CVE-2022-23304US | critical9.8 | — | ||
The implementations of EAP-pwd in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side-channel attacks as a result of cache access patterns. NOTE: this issue e… | ||||
| CVE-2022-23303US | critical9.8 | Exploit | ||
The implementations of SAE in hostapd before 2.10 and wpa_supplicant before 2.10 are vulnerable to side channel attacks as a result of cache access patterns. NOTE: this issue exist… | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
- FixedSIDIS Secured SmartPlug
Update to V7.26.0310 or later version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan