Siemens NX
Siemens NX is affected by missing data validation vulnerability that could allow an attacker with local access on a compromised system to interfere with internal data during the PDF export process that could potentially lead to arbitrary code execution. Siemens has released a new version of NX which resolves the data tampering vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-22923US | — | — | ||
A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512). The affected application contains a data validation vulnerability that c… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-535115: Data Validation Vulnerability in NX Before V2512 - CSAF Versionself
- SSA-535115: Data Validation Vulnerability in NX Before V2512 - HTML Versionself
- ICS Advisory ICSA-26-043-08 JSONself
- ICS Advisory ICSA-26-043-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationNX
Prioritize strong overall system hygiene to prevent initial system infection which includes maintaining fully patched systems, robust endpoint security, and continuous monitoring for signs of compromise
- MitigationNX (Managed Mode)
Prioritize strong overall system hygiene to prevent initial system infection which includes maintaining fully patched systems, robust endpoint security, and continuous monitoring for signs of compromise
- BehobenNX
Update to V2512 or later version
https://support.sw.siemens.com/product/209349590/ - BehobenNX (Managed Mode)
Update to V2512 or later version
https://support.sw.siemens.com/product/209349590/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan