Siemens : Security Vulnerabilities (File inclusion) CVSS score >= 1
A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4). The affected components allow to rename license files with user chosen input without authentication. This could allow an unauthenticated remote attacker to rename and move files as SYSTEM user.
| Max Base Score | 8.2 |
| Published | 2023-01-10 |
| Updated | 2023-01-13 |
| EPSS | 0.08% |
A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.
| Max Base Score | 7.8 |
| Published | 2021-10-01 |
| Updated | 2022-04-24 |
| EPSS | 0.05% |
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the website’s application pool.
| Max Base Score | 7.5 |
| Published | 2022-11-17 |
| Updated | 2022-11-21 |
| EPSS | 0.07% |
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the website’s application pool.
| Max Base Score | 7.5 |
| Published | 2022-11-17 |
| Updated | 2022-11-21 |
| EPSS | 0.07% |
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.
| Max Base Score | 7.5 |
| Published | 2022-11-17 |
| Updated | 2022-11-21 |
| EPSS | 0.05% |
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.
| Max Base Score | 7.5 |
| Published | 2022-11-17 |
| Updated | 2022-11-21 |
| EPSS | 0.05% |
A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.
| Max Base Score | 7.5 |
| Published | 2022-11-17 |
| Updated | 2022-11-21 |
| EPSS | 0.05% |
A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TIA Project-Server (All versions < V1.1), TIA Project-Server V16 (All versions), TIA Project-Server V17 (All versions < V17 Update 6). Affected applications contain an untrusted search path vulnerability that could allow an attacker to escalate privileges, when tricking a legitimate user to start the service from an attacker controlled path.
| Max Base Score | 7.3 |
| Published | 2023-02-14 |
| Updated | 2023-05-09 |
| EPSS | 0.04% |
8 vulnerabilities found