NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Siemens producten
view advisory published 2024-08-13
Siemens heeft kwetsbaarheden verholpen in diverse producten als COMOS, INTRALOG, LOGO!, NX, SCALANCE, SINEC en Teamcenter.
01
describes (50)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-41978US | medium6.5 | — | ||
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.… | ||||
| CVE-2024-41977US | high8.0 | — | ||
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.… | ||||
| CVE-2024-41976US | high8.8 | — | ||
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.1), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.… | ||||
| CVE-2024-41941US | medium4.3OT elevated | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated a… | ||||
| CVE-2024-41940US | critical9.1 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly validate user input to a privileged command queue. This could all… | ||||
| CVE-2024-41939US | high8.8OT elevated | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated a… | ||||
| CVE-2024-41938US | low3.8 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerabil… | ||||
| CVE-2024-41908US | — | — | ||
A vulnerability has been identified in NX (All versions < V2406.3000). The affected applications contains an out of bounds read vulnerability while parsing specially crafted PRT fi… | ||||
| CVE-2024-41907US | medium5.4 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application is missing general HTTP security headers in the w… | ||||
| CVE-2024-41906US | medium6.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses… | ||||
| CVE-2024-41905US | medium6.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not have access control for accessing the file… | ||||
| CVE-2024-41904US | high7.5 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not properly enforce restriction of excessive… | ||||
| CVE-2024-41903US | high7.2 | — | ||
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application mounts the container's root filesystem with read… | ||||
| CVE-2024-41683US | medium5.3 | — | ||
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce a strong user password policy. This could facil… | ||||
| CVE-2024-41682US | medium5.3 | — | ||
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). Affected products do not properly enforce restriction of excessive authentication attemp… | ||||
| CVE-2024-41681US | high7.5 | — | ||
A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected products is configured to support weak ciphers by default. Th… | ||||
| CVE-2024-39922US | — | — | ||
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (A… | ||||
| CVE-2024-36398US | high7.8 | — | ||
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of its services as `NT AUTHORITY\SYSTEM`. This could allow a loca… | ||||
| CVE-2024-30045US | — | — | ||
.NET and Visual Studio Remote Code Execution Vulnerability | ||||
| CVE-2024-32637US | medium5.5 | — | ||
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions <… | ||||
showing 20 of 50
02
references
External citations — patches, advisories, analysis.
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan