# iava_bulletins

iava_id: /node/24568
title: EnOcean SmartServer IoT
release_date: Thu, 19 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-01.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to remotely execute arbitrary code and bypass ASLR.</strong></p>
  <p>The following versions of EnOcean SmartServer IoT are affected:</p>
  <ul>
  <li>SmartServer IoT &lt;=4.60.009 (CVE-2026-20761, CVE-2026-22885)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.1</td>
  <td>EnOcean Edge Inc</td>
  <td>EnOcean SmartServer IoT</td>
  <td>Improper Neutralization of Special Elements used in a Command ('Command Injection'), Out-of-bounds Read</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Information Technology</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United States</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-20761</a></h3>
  <div class="csaf-accordion-content">
  <p>A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in arbitrary OS command execution on the device.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-20761">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>EnOcean SmartServer IoT</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>EnOcean Edge Inc</div>
  <div class="ics-version"><strong>Product Version:</strong><br>EnOcean Edge Inc SmartServer IoT: &lt;=4.60.009</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>EnOcean recommends users update the SmartServer platform software to SmartServer 4.6 Update 2 (v4.60.023) or a later release at https://enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes#Current-Stable-Release.<br>For additional mitigations and workarounds, refer to EnOcean's hardening guide at https://enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/77.html">CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.1</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-22885</a></h3>
  <div class="csaf-accordion-content">
  <p>A vulnerability exists in EnOcean SmartServer IoT version 4.60.009 and prior, which would allow remote attackers, in the LON IP-852 management messages, to send specially crafted IP-852 messages resulting in a memory leak from the program's memory.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-22885">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>EnOcean SmartServer IoT</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>EnOcean Edge Inc</div>
  <div class="ics-version"><strong>Product Version:</strong><br>EnOcean Edge Inc SmartServer IoT: &lt;=4.60.009</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>EnOcean recommends users update the SmartServer platform software to SmartServer 4.6 Update 2 (v4.60.023) or a later release at https://enoceanwiki.atlassian.net/wiki/spaces/DrftSSIoT/pages/1475410/SmartServer+IoT+Release+Notes#Current-Stable-Release.<br>For additional mitigations and workarounds, refer to EnOcean's hardening guide at https://enoceanwiki.atlassian.net/wiki/spaces/IEC/pages/288063529/Enhancing+Security.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Amir Zaltzman of Claroty Team82 reported these vulnerabilities to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>
  <p>Do not click web links or open attachments in unsolicited email messages.</p>
  <p>Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.</p>
  <p>Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.</p>
  <p>No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities have a high attack complexity.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-19</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-19</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24571
title: Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller
release_date: Thu, 19 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-04
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-04.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could result in an over- or under-odorization event.</strong></p>
  <p>The following versions of Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller are affected:</p>
  <ul>
  <li>OdorEyes EcoSystem Pulse Bypass System with XL4 Controller vers:all/* (CVE-2026-24790)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.2</td>
  <td>Welker</td>
  <td>Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller</td>
  <td>Missing Authentication for Critical Function</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Chemical, Critical Manufacturing, Energy, Food and Agriculture</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United States</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-24790</a></h3>
  <div class="csaf-accordion-content">
  <p>The underlying PLC of the device can be remotely influenced, without proper safeguards or authentication.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-24790">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Welker</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Welker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller: vers:all/*</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Welker did not respond to CISA's attempts at coordination. Users of Welker OdorEyes devices are encouraged to contact Welker and keep their systems up to date.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.2</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>A project sponsored by DHS S&amp;T reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-19</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-19</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24570
title: Jinan USR IOT Technology Limited (PUSR) USR-W610
release_date: Thu, 19 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-03
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-03.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of these vulnerabilities could result in authentication being disabled, a denial-of-service condition, or an attacker stealing valid user credentials, including administrator credentials.</strong></p>
  <p>The following versions of Jinan USR IOT Technology Limited (PUSR) USR-W610 are affected:</p>
  <ul>
  <li>USR-W610 &lt;=3.1.1.0 (CVE-2026-25715, CVE-2026-24455, CVE-2026-26049, CVE-2026-26048)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 9.8</td>
  <td>Jinan USR IOT Technology Limited (PUSR)</td>
  <td>Jinan USR IOT Technology Limited (PUSR) USR-W610</td>
  <td>Weak Password Requirements, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials, Missing Authentication for Critical Function</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>China</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-25715</a></h3>
  <div class="csaf-accordion-content">
  <p>The web management interface of the device allows the administrator username and password to be set to blank values. Once applied, the device permits authentication with empty credentials over the web management interface and Telnet service. This effectively disables authentication across all critical management channels, allowing any network-adjacent attacker to gain full administrative control without credentials.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-25715">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Jinan USR IOT Technology Limited (PUSR) USR-W610</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Jinan USR IOT Technology Limited (PUSR)</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Jinan USR IOT Technology Limited (PUSR) USR-W610: &lt;=3.1.1.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/521.html">CWE-521 Weak Password Requirements</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-24455</a></h3>
  <div class="csaf-accordion-content">
  <p>The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication. Traffic is encoded but not encrypted, exposing user credentials to passive interception by attackers on the same network.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-24455">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Jinan USR IOT Technology Limited (PUSR) USR-W610</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Jinan USR IOT Technology Limited (PUSR)</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Jinan USR IOT Technology Limited (PUSR) USR-W610: &lt;=3.1.1.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/319.html">CWE-319 Cleartext Transmission of Sensitive Information</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-26049</a></h3>
  <div class="csaf-accordion-content">
  <p>The web management interface of the device renders the passwords in a plaintext input field. The current password is directly visible to anyone with access to the UI, potentially exposing administrator credentials to unauthorized observation via shoulder surfing, screenshots, or browser form caching.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-26049">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Jinan USR IOT Technology Limited (PUSR) USR-W610</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Jinan USR IOT Technology Limited (PUSR)</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Jinan USR IOT Technology Limited (PUSR) USR-W610: &lt;=3.1.1.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/522.html">CWE-522 Insufficiently Protected Credentials</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.7</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-26048</a></h3>
  <div class="csaf-accordion-content">
  <p>The Wi-Fi router is vulnerable to de-authentication attacks due to the absence of Management Frame Protection, allowing forged deauthentication and disassociation frames to be broadcast without authentication or encryption. An attacker can use this to cause unauthorized disruptions and create a denial-of-service condition.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-26048">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Jinan USR IOT Technology Limited (PUSR) USR-W610</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Jinan USR IOT Technology Limited (PUSR)</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Jinan USR IOT Technology Limited (PUSR) USR-W610: &lt;=3.1.1.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Jinan USR IOT Technology Limited (PUSR) has stated that the product is end-of-life, and there are no plans to patch. Users of PUSR USR-W610 devices are encouraged to contact PUSR and keep their systems up to date.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Abhishek Pandey of Payatu Security Consulting reported CVE-2026-25715, CVE-2026-24455, and CVE-2026-26049 to CISA</li>
  <li>Abhishek Pandey and Ranit Pradhan of Payatu Security Consulting reported CVE-2026-26048 to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-19</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-19</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24569
title: Valmet DNA Engineering Web Tools
release_date: Thu, 19 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-02
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-050-02.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could allow an unauthenticated attacker to manipulate the web maintenance services URL to achieve arbitrary file read access.</strong></p>
  <p>The following versions of Valmet DNA Engineering Web Tools are affected:</p>
  <ul>
  <li>Valmet DNA Engineering Web Tools &lt;=C2022 (CVE-2025-15577)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.6</td>
  <td>Valmet</td>
  <td>Valmet DNA Engineering Web Tools</td>
  <td>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Energy</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Finland</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-15577</a></h3>
  <div class="csaf-accordion-content">
  <p>An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2025-15577">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Valmet DNA Engineering Web Tools</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Valmet</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Valmet Valmet DNA Engineering Web Tools: &lt;=C2022</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Valmet has issued a fix for the reported vulnerability. Valmet recommends users reach out directly to their automation customer service group to obtain assistance with the fix: <a href="https://www.valmet.com/contact/.">https://www.valmet.com/contact/.</a></p>
  <p><br>For additional information, refer to Valmet's security advisory regarding this issue: https://www.valmet.com/company/innovation/advisories/CVE-2025-15577/.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.6</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Denis Samotuga reported this vulnerability to Valmet</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>
  <p>Do not click web links or open attachments in unsolicited email messages.</p>
  <p>Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.</p>
  <p>Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-19</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-19</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24565
title: CISA Adds Two Known Exploited Vulnerabilities to Catalog
release_date: Wed, 18 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <p>CISA has added two new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p>
  <ul>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2021-22175" target="_blank">CVE-2021-22175</a> GitLab Server-Side Request Forgery (SSRF) Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-22769" target="_blank">CVE-2026-22769</a> Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability</li>
  </ul>
  <p>These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.</p>
  <p><a href="https://www.cisa.gov/binding-operational-directive-22-01">Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</a> established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the <a href="https://www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf">BOD 22-01 Fact Sheet</a> for more information.</p>
  <p>Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">KEV Catalog vulnerabilities</a> as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the <a href="https://www.cisa.gov/known-exploited-vulnerabilities">specified criteria</a>.&nbsp;</p>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/18/cisa-adds-two-known-exploited-vulnerabilities-catalog


iava_id: /node/24556
title: Delta Electronics ASDA-Soft
release_date: Tue, 17 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-02
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-048-02.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability may allow an attacker to write arbitrary data beyond the bounds of a stack-allocated buffer, leading to the corruption of a structured exception handler (SEH).</strong></p>
  <p>The following versions of Delta Electronics ASDA-Soft are affected:</p>
  <ul>
  <li>ASDA-Soft &lt;=7.2.0.0 (CVE-2026-1361)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>Delta Electronics</td>
  <td>Delta Electronics ASDA-Soft</td>
  <td>Stack-based Buffer Overflow</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Taiwan</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1361</a></h3>
  <div class="csaf-accordion-content">
  <p>A stack-based buffer overflow vulnerability exists in ASDA_Soft version 7.2.0.0 when parsing .par files. The root cause is the improper validation of a user-controlled size parameter, which is checked incorrectly against the upper limits of the local buffer. This allows data to be written past the end of the buffer.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-1361">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Delta Electronics ASDA-Soft</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Delta Electronics</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Delta Electronics ASDA-Soft: &lt;=7.2.0.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Delta has fixed this vulnerability and released a new version v7.2.2.0 at Delta Download Center (https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&amp;q=asda-soft&amp;sort_expr=cdate&amp;sort_dir=DESC).<br><a href="https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&amp;q=asda-soft&amp;sort_expr=cdate&amp;sort_dir=DESC">https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&amp;q=asda-soft&amp;sort_expr=cdate&amp;sort_dir=DESC</a></p>
  <p><strong>Mitigation</strong><br>For more information, see Delta Electronics advisory Delta-PCSA-2026-00003 at https://www.deltaww.com/en-US/service-support/product-cybersecurity/advisory<br><a href="https://www.deltaww.com/en-US/service-support/product-cybersecurity/advisory">https://www.deltaww.com/en-US/service-support/product-cybersecurity/advisory</a></p>
  <p><strong>Mitigation</strong><br>Delta Electronics provides the following general recommendations: Do not click on untrusted internet links or open unsolicited attachments in emails. Avoid exposing control systems and equipment to the Internet. Place control system networks and remote devices behind firewalls, and isolate them from the business network. When remote access is required, use a secure access method, such as a virtual private network (VPN).<br>If you have any product-related support concerns, contact Delta via the portal page(https://www.deltaww.com/en-US/service-support/contact-us?type=1) for any information or materials you may require.<br><a href="https://www.deltaww.com/en-US/service-support/contact-us?type=1">https://www.deltaww.com/en-US/service-support/contact-us?type=1</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>nisu of Trend Research reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-17</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-17</td>
  <td>1</td>
  <td>Initial Publication.</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24555
title: Siemens Simcenter Femap and Nastran
release_date: Tue, 17 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-01
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-048-01.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Siemens Simcenter Femap and Nastran is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in NDB and XDB formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
  <p>The following versions of Siemens Simcenter Femap and Nastran are affected:</p>
  <ul>
  <li>Simcenter Femap vers:intdot/&lt;2512 (CVE-2026-23715, CVE-2026-23716, CVE-2026-23717, CVE-2026-23718, CVE-2026-23719, CVE-2026-23720)</li>
  <li>Simcenter Nastran vers:intdot/&lt;2512 (CVE-2026-23715, CVE-2026-23716, CVE-2026-23717, CVE-2026-23718, CVE-2026-23719, CVE-2026-23720)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>Siemens</td>
  <td>Siemens Simcenter Femap and Nastran</td>
  <td>Out-of-bounds Write, Out-of-bounds Read, Heap-based Buffer Overflow</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23715</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds write vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23715">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted XDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23716</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23716">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted XDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23717</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted XDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23717">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted XDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23718</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23718">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted XDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23719</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23719">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted NDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-23720</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-23720">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Simcenter Femap and Nastran</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Simcenter Femap, Simcenter Nastran</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted NDB files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/275652363/">https://support.sw.siemens.com/product/275652363/</a></p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version<br><a href="https://support.sw.siemens.com/product/289054037/">https://support.sw.siemens.com/product/289054037/</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>
  <li>Michael Heinzl reported these vulnerabilities Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-965753 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-17</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-965753 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24554
title: CISA Adds Four Known Exploited Vulnerabilities to Catalog
release_date: Tue, 17 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p>
  <ul>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2008-0015" target="_blank">CVE-2008-0015</a> Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2020-7796" target="_blank">CVE-2020-7796</a> Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2024-7694" target="_blank">CVE-2024-7694</a> TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-2441" target="_blank">CVE-2026-2441</a> Google Chromium CSS Use-After-Free Vulnerability</li>
  </ul>
  <p>These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.</p>
  <p><a href="https://www.cisa.gov/binding-operational-directive-22-01">Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</a> established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the <a href="https://www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf">BOD 22-01 Fact Sheet</a> for more information.</p>
  <p>Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">KEV Catalog vulnerabilities</a> as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the <a href="https://www.cisa.gov/known-exploited-vulnerabilities" data-entity-type="node" data-entity-uuid="f2adba9a-0404-494c-a90c-4363a4a5c934" data-entity-substitution="canonical" title="Reducing the Significant Risk of Known Exploited Vulnerabilities">specified criteria</a>.&nbsp;</p>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/17/cisa-adds-four-known-exploited-vulnerabilities-catalog


iava_id: /node/24558
title: Honeywell CCTV Products
release_date: Tue, 17 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-04
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-048-04.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could lead to account takeovers and unauthorized access to camera feeds; an unauthenticated attacker may change the recovery email address, potentially leading to further network compromise.</strong></p>
  <p>The following versions of Honeywell CCTV Products are affected:</p>
  <ul>
  <li>I-HIB2PI-UL 2MP IP 6.1.22.1216 (CVE-2026-1670)</li>
  <li>SMB NDAA MVO-3 WDR_2MP_32M_PTZ_v2.0 (CVE-2026-1670)</li>
  <li>PTZ WDR 2MP 32M WDR_2MP_32M_PTZ_v2.0 (CVE-2026-1670)</li>
  <li>25M IPC WDR_2MP_32M_PTZ_v2.0 (CVE-2026-1670)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 9.8</td>
  <td>Honeywell</td>
  <td>Honeywell CCTV Products</td>
  <td>Missing Authentication for Critical Function</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Commercial Facilities</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United States</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1670</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected product is vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-1670">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Honeywell CCTV Products</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Honeywell</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Honeywell I-HIB2PI-UL 2MP IP: 6.1.22.1216, Honeywell SMB NDAA MVO-3: WDR_2MP_32M_PTZ_v2.0, Honeywell PTZ WDR 2MP 32M: WDR_2MP_32M_PTZ_v2.0, Honeywell 25M IPC: WDR_2MP_32M_PTZ_v2.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Honeywell recommends users contact Honeywell at https://www.honeywell.com/us/en/contact/support for patch information.<br><a href="https://www.honeywell.com/us/en/contact/support">https://www.honeywell.com/us/en/contact/support</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Souvik Kandar reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the Internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>
  <p>Do not click web links or open attachments in unsolicited email messages.</p>
  <p>Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.</p>
  <p>Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-17</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-17</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24557
title: GE Vernova Enervista UR Setup
release_date: Tue, 17 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-03
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-048-03.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of these vulnerabilities may allow code execution with elevated privileges.</strong></p>
  <p>The following versions of GE Vernova Enervista UR Setup are affected:</p>
  <ul>
  <li>Enervista UR Setup &lt;8.70 (CVE-2026-1762, CVE-2026-1763)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>GE Vernova</td>
  <td>GE Vernova Enervista UR Setup</td>
  <td>Uncontrolled Search Path Element, Path Traversal: '.../...//'</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Energy, Water and Wastewater</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United States</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1762</a></h3>
  <div class="csaf-accordion-content">
  <p>The GE Vernova Enervista UR Setup Installer for versions prior to 8.70 are vulnerable to DLL hijacking. When running the installer in a location with unknown or untrusted DLLs, an attacker could obtain code execution with administrative privileges.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-1762">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>GE Vernova Enervista UR Setup</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>GE Vernova</div>
  <div class="ics-version"><strong>Product Version:</strong><br>GE Vernova Enervista UR Setup: &lt;8.70</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>GE Vernova recommends affected users to use patched versions of Enervista UR Setup: Versions 8.70 or later (https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7).<br><a href="https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7">https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1763</a></h3>
  <div class="csaf-accordion-content">
  <p>GE Vernova Enervista UR Setup versions prior to 8.70 are vulnerable to directory traversal when opening certain firmware update files. This could allow an attacker to write to some files on the filesystem with the privileges of the logged-in user.</p>
  <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-1763">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>GE Vernova Enervista UR Setup</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>GE Vernova</div>
  <div class="ics-version"><strong>Product Version:</strong><br>GE Vernova Enervista UR Setup: &lt;8.70</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>GE Vernova recommends affected users to use patched versions of Enervista UR Setup: Versions 8.70 or later (https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7).<br><a href="https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7">https://www.gevernova.com/grid-solutions/resources?prod=urfamily&amp;type=7</a></p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/35.html">CWE-35 Path Traversal: '.../...//'</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.3</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Reid Wightman of Dragos reported these vulnerabilities to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-17</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-17</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24552
title: CISA Adds One Known Exploited Vulnerability to Catalog
release_date: Fri, 13 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <p>CISA has added one new vulnerability to its&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p>
  <ul>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-1731" target="_blank" title="https://www.cve.org/cverecord?id=cve-2026-1731">CVE-2026-1731</a> BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability</li>
  </ul>
  <p>These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.</p>
  <p><a href="https://www.cisa.gov/binding-operational-directive-22-01">Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</a>&nbsp;established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the&nbsp;<a href="https://www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf">BOD 22-01 Fact Sheet</a> for more information.</p>
  <p>Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">KEV Catalog vulnerabilities</a> as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the&nbsp;<a href="https://www.cisa.gov/known-exploited-vulnerabilities">specified criteria</a>.</p>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/13/cisa-adds-one-known-exploited-vulnerability-catalog


iava_id: /node/24535
title: Siemens COMOS
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-03
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-03.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>COMOS is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code or cause denial of service condition, data infiltration or perform access control violations. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are not, or not yet available.</strong></p>
  <p>The following versions of Siemens COMOS are affected:</p>
  <ul>
  <li>COMOS V10.4 vers:intdot/&lt;10.4.5, vers:intdot/&lt;10.4.5 (CVE-2024-47875, CVE-2025-2783)</li>
  <li>COMOS V10.4.5 vers:intdot/&lt;10.4.5.0.2 (CVE-2024-11053, CVE-2025-10148)</li>
  <li>COMOS V10.5 vers:intdot/&lt;10.5.2, vers:intdot/&lt;10.5.2 (CVE-2025-2783, CVE-2024-47875)</li>
  <li>COMOS V10.6 vers:all/* (CVE-2024-11053, CVE-2025-10148, CVE-2025-40800, CVE-2025-40801)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 10</td>
  <td>Siemens</td>
  <td>Siemens COMOS</td>
  <td>Exposure of Sensitive Information to an Unauthorized Actor, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Input Validation, Generation of Predictable Numbers or Identifiers, Improper Certificate Validation</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-11053</a></h3>
  <div class="csaf-accordion-content">
  <p>When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-11053">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.4.5, COMOS V10.6</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>None available</strong><br>Currently no fix is available</p>
  <p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/200.html">CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-47875</a></h3>
  <div class="csaf-accordion-content">
  <p>DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47875">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.4, COMOS V10.5</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V10.4.5 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V10.5.2 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/79.html">CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>10</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-2783</a></h3>
  <div class="csaf-accordion-content">
  <p>Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-2783">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.4, COMOS V10.5</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V10.4.5 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V10.5.2 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.3</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-10148</a></h3>
  <div class="csaf-accordion-content">
  <p>curl's websocket code did not update the 32 bit mask pattern for each new outgoing frame as the specification says. Instead it used a fixed mask that persisted and was used throughout the entire connection. A predictable mask pattern allows for a malicious server to induce traffic between the two communicating parties that could be interpreted by an involved proxy (configured or transparent) as genuine, real, HTTP traffic with content and thereby poison its cache. That cached poisoned content could then be served to all users of that proxy.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-10148">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.4.5, COMOS V10.6</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>None available</strong><br>Currently no fix is available</p>
  <p><strong>Vendor fix</strong><br>Contact customer support to receive patch and update information</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/340.html">CWE-340 Generation of Predictable Numbers or Identifiers</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-40800</a></h3>
  <div class="csaf-accordion-content">
  <p>The IAM client in affected products is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-40800">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.6</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>None available</strong><br>Currently no fix is available</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.4</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-40801</a></h3>
  <div class="csaf-accordion-content">
  <p>The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-40801">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens COMOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>COMOS V10.6</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>None available</strong><br>Currently no fix is available</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.1</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-212953 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2025-12-09</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2025-12-09</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-01-13</td>
  <td>2</td>
  <td>Removed CVE-2024-11053 and CVE-2025-10148 from COMOS V10.5.2 as this version line is not affected</td>
  </tr>
  <tr>
  <td>2026-02-10</td>
  <td>3</td>
  <td>Added fix for COMOS V10.4.5</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>4</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-212953 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24538
title: Siemens SINEC OS
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-06.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
  <p>The following versions of Siemens SINEC OS are affected:</p>
  <ul>
  <li>RUGGEDCOM RST2428P (6GK6242-6PA00) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XCH328 (6GK5328-4TS01-2EC2) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XCM324 (6GK5324-8TS01-2AC2) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XCM328 (6GK5328-4TS01-2AC2) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XCM332 (6GK5332-0GA01-2AC2) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  <li>SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) vers:intdot/&lt;3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 10</td>
  <td>Siemens</td>
  <td>Siemens SINEC OS</td>
  <td>Out-of-bounds Write, Double Free, Improper Input Validation, Use After Free, Improper Restriction of Operations within the Bounds of a Memory Buffer, Free of Memory not on the Heap, Buffer Over-read, Out-of-bounds Read, NULL Pointer Dereference, Improper Certificate Validation, Incorrect Comparison, Exposure of Sensitive Information to an Unauthorized Actor, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Multiple Releases of Same Resource or Handle, Integer Overflow to Buffer Overflow, Improper Access Control, Integer Overflow or Wraparound, Buffer Underwrite ('Buffer Underflow'), Incorrect Calculation, Stack-based Buffer Overflow, Covert Timing Channel, Generation of Predictable Numbers or Identifiers, Missing Authentication for Critical Function, Allocation of Resources Without Limits or Throttling</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Energy, Critical Manufacturing, Transportation Systems, Water and Wastewater</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2022-48174</a></h3>
  <div class="csaf-accordion-content">
  <p>There is a stack overflow vulnerability in ash.c:6030 in BusyBox versions prior to 1.35. In the environment of internet of vehicles, this vulnerability can be exploited via crafted commands, potentially leading to arbitrary code execution.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-48174">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-7256</a></h3>
  <div class="csaf-accordion-content">
  <p>In affected libpcap versions, during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller whether freeaddrinfo() needs to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-7256">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/415.html">CWE-415 Double Free</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>4.4</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-39810</a></h3>
  <div class="csaf-accordion-content">
  <p>An issue in the CPIO command of Busybox v1.33.2 may allow an attacker to perform a directory traversal attack.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-39810">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.1</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-42363</a></h3>
  <div class="csaf-accordion-content">
  <p>A use-after-free vulnerability was discovered in the xasprintf function located in xfuncs_printf.c:344 in BusyBox v.1.36.1.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-42363">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/416.html">CWE-416 Use After Free</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-42364</a></h3>
  <div class="csaf-accordion-content">
  <p>A use-after-free vulnerability in BusyBox v.1.36.1 may lead to denial of service through a crafted awk pattern processed by the evaluate function in awk.c.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-42364">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/416.html">CWE-416 Use After Free</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-42365</a></h3>
  <div class="csaf-accordion-content">
  <p>A use-after-free vulnerability was identified in BusyBox v.1.36.1 through a crafted awk pattern processed by the copyvar function in awk.c</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-42365">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/416.html">CWE-416 Use After Free</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-42366</a></h3>
  <div class="csaf-accordion-content">
  <p>A heap buffer overflow was discovered in BusyBox version 1.36.1 in the next_token function at awk.c:1159.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-42366">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/119.html">CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-6197</a></h3>
  <div class="csaf-accordion-content">
  <p>libcurl's ASN1 parser includes the utf8asn1str() function, which is used for parsing an ASN.1 UTF-8 string. It can detect an invalid field and return an error. Unfortunately, when doing so it also invokes free() on a 4-byte local stack buffer. Most modern malloc implementations detect this error and immediately abort. Some, however, accept the input pointer and add that memory to its list of available chunks. This leads to the overwriting of nearby stack memory. The content of the overwrite is decided by the free() implementation; likely to be memory pointers and a set of flags. The most likely outcome of exploiting this flaw is a crash, although it cannot be ruled out that more serious results may occur under special circumstances.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-6197">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/590.html">CWE-590 Free of Memory not on the Heap</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-6874</a></h3>
  <div class="csaf-accordion-content">
  <p>libcurl's URL API function curl_url_get() offers punycode conversions to and from IDN. When converting a name that is exactly 256 bytes, libcurl may read outside of a stack-based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exactly - but does not null-terminate the string. This flaw can lead to stack contents accidentally getting returned as part of the converted string.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-6874">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/126.html">CWE-126 Buffer Over-read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.1</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-7264</a></h3>
  <div class="csaf-accordion-content">
  <p>libcurl's ASN.1 parser code includes the GTime2str() function, which is used for parsing an ASN.1 generalized time field. If given a syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() being performed on a pointer to a heap buffer area that is not intentionally not null-terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-7264">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-8006</a></h3>
  <div class="csaf-accordion-content">
  <p>Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that becomes available is pcap_findalldevs_ex(). One of the function arguments can accept a filesystem path, which typically refers to a directory containing input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(). It does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer dereference.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-8006">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/476.html">CWE-476 NULL Pointer Dereference</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>4.4</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-8096</a></h3>
  <div class="csaf-accordion-content">
  <p>When curl is configured to use the certificate status request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and may incorrectly consider the response valid. If the returned status reports an error other than 'revoked' (such as 'unauthorized') it is not treated as a bad certificate.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-8096">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-9681</a></h3>
  <div class="csaf-accordion-content">
  <p>When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, causing it to expire earlier or later than intended. This affects curl-using applications that enable HSTS and use URLs with the insecure http:// scheme and perform transfers with hosts like x.example.com as well as example.com where the first host is a subdomain of the second host. (The HSTS cache must either have been populated manually or through previous HTTPS requests, as entries for the domains involved are required to trigger this issue.) When x.example.com responds with Strict-Transport-Security: headers, this bug can make the subdomain's expiry timeout bleed over and get set for the parent domain example.com in curl's HSTS cache. The result of a triggered bug is that HTTP accesses to example.com get converted to HTTPS for a different period of time than what was asked for by the origin server. If example.com for example stops supporting HTTPS at its expiry time, curl might then fail to access http://example.com until the (wrongly set) timeout expires. This bug can also expire the parent's entry earlier, thus making curl inadvertently switch back to insecure HTTP earlier than otherwise intended.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9681">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/697.html">CWE-697 Incorrect Comparison</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-11053</a></h3>
  <div class="csaf-accordion-content">
  <p>When configured to use a .netrc file for credentials and follow HTTP redirects, curl could leak the password from the first host to the redirect target host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits the password or both the login and password.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-11053">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/200.html">CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-12718</a></h3>
  <div class="csaf-accordion-content">
  <p>This vulnerability allows modifying some file metadata (e.g., last modified) with filter="data" or file permissions (chmod) with filter="tar" for files outside the extraction directory. You are affected by this vulnerability if using the tarfile&nbsp;module to extract untrusted tar archives when extracting untrusted tar archives with TarFile.extractall() or TarFile.extract() and specifying the filter= parameter with a value of "data"&nbsp;or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions do not include the extraction filter feature. Note that for Python 3.14 or later the default value of filter=&nbsp;changed from "no filtering" to "data", so if you are relying on this new default behavior then your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions which are tar archives as source distributions already allow arbitrary code execution during the build process. However, when evaluating source distributions it is important to avoid installing source distributions that contain suspicious links.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-12718">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-41996</a></h3>
  <div class="csaf-accordion-content">
  <p>Validating the order of public keys in the Diffie-Hellman Key Agreement Protocol—when an approved safe prime is used—can allow remote attackers (from the client side) to trigger computationally expensive server-side DHE modular-exponentiation calculations. This can result in asymmetric resource consumption. In the basic attack scenario, the client claims that it can only communicate using DHE, and the server must be configured to allow DHE and validate the order of the public keys.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-41996">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-47619</a></h3>
  <div class="csaf-accordion-content">
  <p>syslog-ng is an enhanced log daemon. Prior to version 4.8.2, `tls_wildcard_match()` matches certificates such as foo.*.bar, which is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided or invalidated. This issue could impact TLS connections and potentially enable man-in-the-middle attacks. Version 4.8.2 contains a fix for the issue.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-47619">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/295.html">CWE-295 Improper Certificate Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2024-52533</a></h3>
  <div class="csaf-accordion-content">
  <p>gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 is affected by an off-by-one error resulting in a buffer overflow because SOCKS4_CONN_MSG_LEN is insufficient to accommodate a trailing '\0' character.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-52533">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-0167</a></h3>
  <div class="csaf-accordion-content">
  <p>When asked to use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password from the first host to the redirect target host under certain circumstances. This flaw occurs only if the netrc file contains a default entry that omits both the login and password which is a rare circumstance.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-0167">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/200.html">CWE-200 Exposure of Sensitive Information to an Unauthorized Actor</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.4</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-0665</a></h3>
  <div class="csaf-accordion-content">
  <p>libcurl could incorrectly close the same eventfd file descriptor twice when closing a connection channel after completing a threaded name resolution.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-0665">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1341.html">CWE-1341 Multiple Releases of Same Resource or Handle</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.3</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-0725</a></h3>
  <div class="csaf-accordion-content">
  <p>When libcurl is configured to perform automatic gzip decompression of content-encoded HTTP responses using the CURLOPT_ACCEPT_ENCODING option with zlib version 1.2.0.3 or older, an attacker-controlled integer overflow could lead to a buffer overflow in libcurl</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-0725">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/680.html">CWE-680 Integer Overflow to Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.3</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-1390</a></h3>
  <div class="csaf-accordion-content">
  <p>The PAM module pam_cap.so in libcap configuration supports group names starting with "@". During parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in unintended users being granted unintended inherited capabilities, potentially leading to security risks. Attackers can exploit this vulnerability to achieve local privilege escalation on systems where /etc/security/capability.conf is used to configure user inherited privileges by creating specially crafted usernames.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-1390">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/284.html">CWE-284 Improper Access Control</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.1</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-3360</a></h3>
  <div class="csaf-accordion-content">
  <p>An integer overflow and buffer under-read in GLib occurs when parsing an excessively long or malformed ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-3360">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/190.html">CWE-190 Integer Overflow or Wraparound</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4138</a></h3>
  <div class="csaf-accordion-content">
  <p>This vulnerability allows the extraction filter to be ignored, which enables symlink targets to point outside the destination directory and permits modification of some file metadata. You are affected by this vulnerability if you use the tarfile module to extract untrusted tar archives with TarFile.extractall() or TarFile.extract() and specify the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that for Python 3.14 or later, the default value of filter= changed from "no filtering" to "data," so if you rely on this new default behavior, your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions, which are tar archives, as source distributions already allow arbitrary code execution during the build process. However, when evaluating source distributions, it is important to avoid installing those with suspicious links.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4138">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4330</a></h3>
  <div class="csaf-accordion-content">
  <p>This vulnerability allows the extraction filter to be ignored, enabling symlink targets to point outside the destination directory and permitting modification of some file metadata. You are affected by this vulnerability if you use the tarfile module to extract untrusted tar archives with TarFile.extractall() or TarFile.extract() and specify the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation (https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter) for more information. Note that for Python 3.14 or later, the default value of filter= changed from "no filtering" to "data," so if you rely on this new default behavior, your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions, which are tar archives, as source distributions already allow arbitrary code execution during the build process. However, when evaluating source distributions, it is important to avoid installing those with suspicious links.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4330">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4373</a></h3>
  <div class="csaf-accordion-content">
  <p>GLib contains an integer overflow vulnerability in the g_string_insert_unichar() function. If the specified insertion position is excessively large, it may overflow, resulting in a buffer underwrite.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4373">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/124.html">CWE-124 Buffer Underwrite ('Buffer Underflow')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>4.8</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4435</a></h3>
  <div class="csaf-accordion-content">
  <p>When using TarFile.errorlevel = 0 and extracting with a filter, the documented behavior is that any filtered members should be skipped and not extracted. However, in affected versions, the actual behavior is that the member is still extracted and not skipped.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4435">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/682.html">CWE-682 Incorrect Calculation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4516</a></h3>
  <div class="csaf-accordion-content">
  <p>An issue exists in CPython when using bytes.decode("unicode_escape", errors="ignore|replace"). If you are not using the "unicode_escape" encoding or an error handler, your usage is not affected. To work around this issue, you may stop using the errors parameter and instead wrap the bytes.decode() call in a try-except block catching UnicodeDecodeError.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4516">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/416.html">CWE-416 Use After Free</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.1</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-4517</a></h3>
  <div class="csaf-accordion-content">
  <p>This vulnerability allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if you use the tarfile module to extract untrusted tar archives with TarFile.extractall() or TarFile.extract() and specify the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation (https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter) for more information. Note that for Python 3.14 or later, the default value of filter= changed from "no filtering" to "data," so if you rely on this new default behavior, your usage is also affected. Note that none of these vulnerabilities significantly affect the installation of source distributions, which are tar archives, as source distributions already allow arbitrary code execution during the build process. However, when evaluating source distributions, it is important to avoid installing those with suspicious links.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-4517">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/22.html">CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.4</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-6141</a></h3>
  <div class="csaf-accordion-content">
  <p>A vulnerability was discovered in GNU ncurses versions up to 6.5-20250322 and classified as a security issue. This vulnerability affects the postprocess_termcap function in the file tinfo/parse_entry.c. The manipulation leads to a stack-based buffer overflow. Exploitation of this vulnerability requires local access. Upgrading to version 6.5-20250329 addresses this issue. It is recommended to upgrade the affected component.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-6141">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.3</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-9086</a></h3>
  <div class="csaf-accordion-content">
  <p>First, a cookie is set using the secure keyword for https://target. Second, curl is redirected to, or otherwise made to communicate with, http://target (same hostname, but using clear-text HTTP) using the same cookie. Third, the same cookie name is set, but with just a slash as the path (path='/'). Since this site is not secure, the cookie should be ignored. Fourth, a bug in the path comparison logic causes curl to read outside a heap buffer boundary. The bug may cause a crash or lead to an incorrect comparison, allowing the clear-text site to override the contents of the secure cookie. This behavior depends on the memory contents immediately following the single-byte allocation that holds the path. The expected behavior is to ignore the second cookie, as it was already set as secure on a secure host; overriding it on an insecure host should not be permitted.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-9086">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-9230</a></h3>
  <div class="csaf-accordion-content">
  <p>An application attempting to decrypt CMS messages encrypted using password-based encryption can trigger an out-of-bounds read and write. This out-of-bounds read may trigger a crash, leading to an application denial of service. The out-of-bounds write can cause memory corruption, which may lead to various consequences, including a denial of service or execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that an attacker would be able to perform it is low. Additionally, password-based (PWRI) encryption support in CMS messages is very rarely used. For that reason, the issue was assessed as moderate severity. The FIPS modules in versions 3.5, 3.4, 3.3, 3.2, 3.1, and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-9230">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/787.html">CWE-787 Out-of-bounds Write</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.6</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-9231</a></h3>
  <div class="csaf-accordion-content">
  <p>A timing side-channel that could allow remote recovery of the private key exists in the SM2 algorithm implementation on 64-bit ARM platforms. A timing side-channel in SM2 signature computations on 64-bit ARM platforms could allow an attacker to recover the private key. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a signal that may enable such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS; therefore, this CVE is not relevant in most TLS contexts. However, because it is possible to add support for such certificates via a custom provider, and given that the private key may be recoverable through remote timing measurements in that context, this is considered a moderate severity issue. The FIPS modules in versions 3.5, 3.4, 3.3, 3.2, 3.1, and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-9231">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/385.html">CWE-385 Covert Timing Channel</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-9232</a></h3>
  <div class="csaf-accordion-content">
  <p>An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set, and the host portion of the authority component of the HTTP URL is an IPv6 address. An out-of-bounds read can trigger a crash, leading to an application denial of service. The OpenSSL HTTP client API functions can be used directly by applications, but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However, the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code, the out-of-bounds read can only trigger a crash. Furthermore, the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function, and the user must have a 'no_proxy' environment variable set. For the aforementioned reasons, the issue was assessed as low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0, and 3.5.0. The FIPS modules in versions 3.5, 3.4, 3.3, 3.2, 3.1, and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-9232">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.9</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-10148</a></h3>
  <div class="csaf-accordion-content">
  <p>curl's WebSocket code did not update the 32-bit mask pattern for each new outgoing frame as required by the specification. Instead, it used a fixed mask that persisted throughout the entire connection. A predictable mask pattern allows a malicious server to induce traffic between the two communicating parties. This traffic could be interpreted by an involved proxy (configured or transparent) as genuine HTTP traffic with content, thereby poisoning its cache. The poisoned cache content could then be served to all users of that proxy.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-10148">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/340.html">CWE-340 Generation of Predictable Numbers or Identifiers</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-27587</a></h3>
  <div class="csaf-accordion-content">
  <p>OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using the private key to extract the K value (nonce) from the signatures. Next, based on the bit size of the extracted nonce, an attacker can compare signing times of full-sized nonces to those of signatures using smaller nonces through statistical tests. There is a side-channel in the P-364 curve that allows private key extraction. Additionally, there is a dependency between the bit size of K and the size of the side channel. This CVE is disputed because the OpenSSL security policy explicitly states that any side channels requiring the same physical system to be detected are outside the software’s threat model. The timing signal is so small that it cannot be detected without the attacking process running on the same physical system.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-27587">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/385.html">CWE-385 Covert Timing Channel</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-32433</a></h3>
  <div class="csaf-accordion-content">
  <p>Erlang/OTP is a collection of libraries and tools for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, an SSH server could allow an attacker to perform unauthenticated remote code execution. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access and execute arbitrary commands without valid credentials. This issue is resolved in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or preventing access via firewall rules.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-32433">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>10</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38084</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "mm/hugetlb: unshare page tables during VMA split, not before. " Currently, __split_vma() triggers hugetlb page table unsharing through vm_ops-&gt;may_split(). This happens before the VMA lock and rmap locks are taken, which is too early. It allows racing VMA-locked page faults in the process and racing rmap walks from other processes to cause page tables to be shared again before the split occurs. This is fixed by explicitly calling the hugetlb unshare logic from __split_vma() in the same place where THP splitting also occurs. At that point, both the VMA and the rmap(s) are write-locked. A notable detail is that the helper hugetlb_unshare_pmds() can be called from two different locking contexts: First, from hugetlb_split(), holding: mmap lock (exclusively), VMA lock, file rmap lock (exclusively). Second, from hugetlb_unshare_all_pmds(), which appears to be designed to call with only the mmap lock held (in shared mode), but currently only runs while holding the mmap lock and VMA lock. This commit fixes a race condition introduced in commit b30c14cd6102 (“hugetlb: unshare some PMDs when splitting VMAs”). That commit claimed to fix an issue introduced in 5.13, but the fix should also apply to earlier versions.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38084">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38085</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race." huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes. This can potentially turn it into a normal page table used in another process, where unrelated VMAs can later be installed. If this occurs during a concurrent gup_fast() operation, the function could end up walking the page tables of another process. Although this does not appear to immediately lead to kernel memory corruption, it is highly unusual and unexpected. This is resolved by using an explicit broadcast IPI through tlb_remove_table_sync_one(), similar to the approach used in khugepaged when removing page tables for a THP collapse.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38085">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38086</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "net: ch9200: fix uninitialised access during mii_nway_restart." In mii_nway_restart(), the code attempts to call mii-&gt;mdio_read, which is ch9200_mdio_read(). ch9200_mdio_read() uses a local buffer called buff, which is initialized with control_read(). However, buff is conditionally initialized inside control_read(). If the condition err == size is not met, then buff remains uninitialized. Once this happens, the uninitialized buff is accessed and returned during ch9200_mdio_read(). The problem stems from the fact that ch9200_mdio_read() ignores the return value of control_read(), leading to uninitialized access of buff. To fix this, the return value of control_read() should be checked and return early on error.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38086">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38345</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "ACPICA: fix ACPI operand cache leak in dswstate.c." An ACPI cache leak was identified during early termination and continued boot scenarios. When early termination occurs due to a malicious ACPI table, the Linux kernel terminates the ACPI function and continues the boot process. While the kernel terminates the ACPI function, kmem_cache_destroy() reports an Acpi-Operand cache leak. Analysis revealed that the acpi_ds_obj_stack_pop_and_delete() function miscalculated the top of the stack. The acpi_ds_obj_stack_push() function uses walk_state-&gt;operand_index for the start position of the top, but acpi_ds_obj_stack_pop_and_delete() considers index 0. Therefore, this causes acpi operand memory leak. This cache leak poses a security risk because older kernels (&lt;= 4.9) display memory locations of kernel functions in stack dumps. Malicious users could exploit this information to bypass kernel ASLR. A patch was developed to fix the ACPI operand cache leak.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38345">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38350</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "net/sched: Always pass notifications when child class becomes empty." Certain classful qdiscs may invoke their classes' dequeue handler during an enqueue operation. This may unexpectedly empty the child qdisc, causing an in-flight class to become passive via qlen_notify(). Most qdiscs do not expect such behavior at this point and may eventually re-activate the class anyway, which can lead to a use-after-free. The referenced fix commit attempted to address this behavior for the HFSC case by adjusting backlog accounting. However, this proved incomplete because the parent's parent may also encounter the issue. Because backlog accounting issues causing use-after-free on stale class pointers have become a recurring problem, this patch takes a different approach. Instead of attempting to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog() always calls qlen_notify() when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify() on passive classes multiple times. This is not an issue after the recent patch series that made all classful qdiscs' qlen_notify() handlers idempotent.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38350">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.1</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-38498</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "do_change_type(): refuse to operate on unmounted or non-owned mounts." This change ensures that propagation settings can only be modified for mounts located in the caller's mount namespace. This change aligns permission checking with the behavior of other mount(2) system calls.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-38498">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.3</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39839</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "batman-adv: fix out-of-bounds read/write in network-coding decode." atadv_nc_skb_decode_packet() trusts coded_len and checks only against skb-&gt;len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom. Additionally, the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write. Ensure that coded_len fits within the payload area of both destination and source sk_buff structures before performing XOR operations.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39839">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39841</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "scsi: lpfc: Fix buffer free/clear order in deferred receive path." This change addresses a use-after-free vulnerability by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock. Concurrent paths (e.g., ABTS and the repost path) also inspect and release the same pointer under the lock, so the previous order could lead to a double-free or use-after-free condition. Note that the repost path already uses the correct pattern: detach the pointer under the lock, then free it after dropping the lock. The deferred path now follows the same pattern.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39841">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39846</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()." In __iodyn_find_io_region(), pcmcia_make_resource() is assigned to res and used in pci_bus_alloc_resource(). res is dereferenced in pci_bus_alloc_resource(), which could lead to a NULL pointer dereference if pcmcia_make_resource() fails. This issue is resolved by adding a check for res.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39846">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39853</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "i40e: Fix potential invalid access when MAC list is empty." list_first_entry() never returns NULL—if the list is empty, it still returns a pointer to an invalid object, which can lead to invalid memory access when dereferenced. This issue is resolved by using list_first_entry_or_null() instead of list_first_entry().</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39853">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39860</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()." In the crash report, a single thread calling bt_accept_dequeue() freed sk and accessed it afterward. The root cause appears to be the racy l2cap_sock_cleanup_listen() call introduced by the cited commit. bt_accept_dequeue() is called under lock_sock() except when invoked by l2cap_sock_release(). Two threads could see the same socket during the list iteration in bt_accept_dequeue(). Depending on timing, the other thread could appear in the "Freed by task" section. The fix ensures that l2cap_sock_cleanup_listen() is called under lock_sock() in l2cap_sock_release().</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39860">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.1</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39864</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "wifi: cfg80211: fix use-after-free in cmp_bss()." Following the bss_free() quirk introduced in commit 776b3580178f ("cfg80211: track hidden SSID networks properly"), update cfg80211_update_known_bss() to free the last beacon frame elements only if they are not shared via the corresponding hidden_beacon_bss pointer.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39864">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-39865</a></h3>
  <div class="csaf-accordion-content">
  <p>In the Linux kernel, the following vulnerability has been resolved: "tee: fix NULL pointer dereference in tee_shm_put()." tee_shm_put() has a NULL pointer dereference. Add a NULL check in tee_shm_put() to resolve the issue.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-39865">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/20.html">CWE-20 Improper Input Validation</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-59375</a></h3>
  <div class="csaf-accordion-content">
  <p>Expat versions prior to 2.7.2 allow attackers to trigger large dynamic memory allocations via a small document submitted for parsing.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-59375">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC OS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>RUGGEDCOM RST2428P (6GK6242-6PA00), SCALANCE XCH328 (6GK5328-4TS01-2EC2), SCALANCE XCM324 (6GK5324-8TS01-2AC2), SCALANCE XCM328 (6GK5328-4TS01-2AC2), SCALANCE XCM332 (6GK5332-0GA01-2AC2), SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3), SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3), SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3), SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3), SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3), SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3), SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-2AR3), SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3), SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3), SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V3.3 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/770.html">CWE-770 Allocation of Resources Without Limits or Throttling</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens reported these vulnerabilities to CISA.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-089022 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-01-28</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-01-28</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens SSA-089022 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24536
title: Siemens Desigo CC Product Family and SENTRON Powermanager
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-04
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-04.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Versions V6.0 through V8 QU1 of the Desigo CC product family (Desigo CC, Desigo CC Compact, Desigo CC Connect, Cerberus DMS), as well as the Desigo CC-based SENTRON Powermanager, are affected by a vulnerability in the underlying third-party component WIBU Systems CodeMeter Runtime. Successful exploitation of this vulnerability could lead to code execution in the context of the current process. Siemens has released instructions how to update the CodeMeter Runtime component and recommends to apply the update on affected systems.</strong></p>
  <p>The following versions of Siemens Desigo CC Product Family and SENTRON Powermanager are affected:</p>
  <ul>
  <li>Desigo CC family V6 vers:all/* (CVE-2023-38545)</li>
  <li>Desigo CC family V7 vers:all/* (CVE-2023-38545)</li>
  <li>Desigo CC family V8: All versions prior to V8.0 QU2</li>
  <li>SENTRON Powermanager V6 vers:all/* (CVE-2023-38545)</li>
  <li>SENTRON Powermanager V7 vers:all/* (CVE-2023-38545)</li>
  <li>SENTRON Powermanager V8: All versions prior to V8.0 QU2</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.8</td>
  <td>Siemens</td>
  <td>Siemens Desigo CC Product Family and SENTRON Powermanager</td>
  <td>Heap-based Buffer Overflow</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2023-38545</a></h3>
  <div class="csaf-accordion-content">
  <p>This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that hostname can be is 255 bytes. If the hostname is detected to be longer than 255 bytes, curl switches to local name resolving and instead passes on the resolved address only to the proxy. Due to a bug, the local variable that means "let the host resolve the name" could get the wrong value during a slow SOCKS5 handshake, and contrary to the intention, copy the too long hostname to the target buffer instead of copying just the resolved address there.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2023-38545">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Desigo CC Product Family and SENTRON Powermanager</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Desigo CC family V6, Desigo CC family V7, Desigo CC family V8, SENTRON Powermanager V6, SENTRON Powermanager V7, SENTRON Powermanager V8</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V8.0 QU2 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V8.0 QU2 or later version</p>
  <p><strong>Vendor fix</strong><br>Apply patch as documented in section 'Additional Information'</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/122.html">CWE-122 Heap-based Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported this vulnerability to CISA.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-507364 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-507364 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24541
title: Hitachi Energy SuprOS
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-09
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-09.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Hitachi Energy is aware of a vulnerability that affects the SuprOS product versions listed in this document. An attacker successfully exploiting this vulnerability can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.</strong></p>
  <p>The following versions of Hitachi Energy SuprOS are affected:</p>
  <ul>
  <li>SuprOS vers:SuprOS/&lt;=9.2.1, 9.2.2.0 (CVE-2025-7740, CVE-2025-7740)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.8</td>
  <td>Hitachi Energy</td>
  <td>Hitachi Energy SuprOS</td>
  <td>Use of Default Credentials</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Energy, Transportation Systems, Government Services and Facilities</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Switzerland</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-7740</a></h3>
  <div class="csaf-accordion-content">
  <p>A default credentials vulnerability exists in the SuprOS product. If exploited, this could allow an authenticated local attacker to gain access through an admin account created during product deployment.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-7740">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Hitachi Energy SuprOS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Hitachi Energy</div>
  <div class="ics-version"><strong>Product Version:</strong><br>SuprOS 9.2.1 and below, SuprOS 9.2.2.0</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Remove unwanted accounts and/or change the default passwords. Refer to the Secure Deployment Guidelines document as described in chapter 4.3</p>
  <p><strong>Mitigation</strong><br>Upon clean install, change the root password</p>
  <p><strong>Mitigation</strong><br>If updated from previous version, remove unwanted accounts and/or change the default passwords. Refer to the Secure Deployment Guidelines document as described in chapter 4.3</p>
  <p><strong>Vendor fix</strong><br>Hitachi Energy recommends that customers apply the update and take recommended actions at the earliest convenience</p>
  <p><strong>Mitigation</strong><br>While reviewing the recommended immediate actions, assess the risk exposure of affected products within the operational environment and update or upgrade if necessary</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/1392.html">CWE-1392 Use of Default Credentials</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Hitachi Energy reported this vulnerability to CISA.</li>
  </ul>
  <hr>
  <h2>Notice</h2>
  <p>The information in this document is subject to change without notice and should not be construed as a commitment by Hitachi Energy. Hitachi Energy provides no warranty, express or implied, including warranties of merchantability and fitness for a particular purpose, for the information contained in this document, and assumes no responsibility for any errors that may appear in this document. In no event shall Hitachi Energy or any of its suppliers be liable for direct, indirect, special, incidental or consequential damages of any nature or kind arising from the use of this document, or from the use of any hardware or software described in this document, even if Hitachi Energy or its suppliers have been advised of the possibility of such damages. This document and parts hereof must not be reproduced or copied without written permission from Hitachi Energy and the contents hereof must not be imparted to a third party nor used for any unauthorized purpose. All rights to registrations and trademarks reside with their respective owners.</p>
  <hr>
  <h2>Support</h2>
  <p>For additional information and support please contact your product provider or Hitachi Energy service organization. For contact information, see https://www.hitachienergy.com/contact-us/ for Hitachi Energy contact-centers.</p>
  <hr>
  <h2>General Mitigation Factors</h2>
  <p>It is highly recommended to deploy the product following the “SuprOS Security Deployment Guidelines” document. Customers should maintain their systems with products running on supported versions and follow maintenance releases. Recommended security practices and firewall configurations can help protect a process control network from attacks that originate from outside the network. Such practices include that process control systems are physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by means of a firewall system that has a minimal number of ports exposed, and others that have to be evaluated case by case. Process control systems should not be used for Internet surfing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Hitachi Energy PSIRT 8DBD000223 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Hitachi Energy PSIRT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-01-27</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-01-27</td>
  <td>1</td>
  <td>Initial public release</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Hitachi Energy 8DBD000223 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24537
title: Siemens Solid Edge
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-05
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-05.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Solid Edge uses PS/IGES Parasolid Translator Component that contains an out of bounds read that could be triggered when the application reads files in IGS file formats. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for Solid Edge and recommends to update to the latest version.</strong></p>
  <p>The following versions of Siemens Solid Edge are affected:</p>
  <ul>
  <li>Solid Edge: All versions prior to V226.00 Update 03</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>Siemens</td>
  <td>Siemens Solid Edge</td>
  <td>Out-of-bounds Read</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-40936</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-40936">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Solid Edge</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Solid Edge</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V226.00 Update 03 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported this vulnerability to CISA.</li>
  <li>Trend Micro Zero Day Initiative reported this vulnerability to Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-445819 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-445819 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24540
title: Siemens NX
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-08
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-08.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Siemens NX is affected by multiple file parsing vulnerabilities that could be triggered when the application reads files in CGM format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for NX and recommends to update to the latest version.</strong></p>
  <p>The following versions of Siemens NX are affected:</p>
  <ul>
  <li>NX vers:intdot/&lt;2512 (CVE-2026-22923, CVE-2026-22924, CVE-2026-22925)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>Siemens</td>
  <td>Siemens NX</td>
  <td>Stack-based Buffer Overflow, Out-of-bounds Read</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-22923</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-22923">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens NX</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>NX</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted CGM files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/121.html">CWE-121 Stack-based Buffer Overflow</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-22924</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-22924">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens NX</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>NX</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted CGM files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-22925</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected applications contains an out of bounds read vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-22925">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens NX</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>NX</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Do not open untrusted CGM files in affected applications</p>
  <p><strong>Vendor fix</strong><br>Update to V2512 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/125.html">CWE-125 Out-of-bounds Read</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>
  <li>Michael Heinzl reported this vulnerability to Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-535115 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-535115 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24542
title: Airleader Master
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-10
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-10.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could allow an attacker to obtain remote code execution.</strong></p>
  <p>The following versions of Airleader Master are affected:</p>
  <ul>
  <li>Airleader Master &lt;=6.381 (CVE-2026-1358)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 9.8</td>
  <td>Airleader GmbH</td>
  <td>Airleader Master</td>
  <td>Unrestricted Upload of File with Dangerous Type</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Chemical, Critical Manufacturing, Energy, Food and Agriculture, Healthcare and Public Health, Transportation Systems, Water and Wastewater</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1358</a></h3>
  <div class="csaf-accordion-content">
  <p>Airleader Master versions 6.381 and prior allow for file uploads without restriction to multiple webpages running maximum privileges. This could allow an unauthenticated user to potentially obtain remote code execution on the server.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1358">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Airleader Master</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Airleader GmbH</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Airleader GmbH Airleader Master: &lt;=6.381</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Airleader recommends that users upgrade Airleader Master to version 6.386 or later.</p>
  <p><strong>Mitigation</strong><br>Users of Airleader Master are encouraged to reach out to Airleader via email or submit a web form for more information and mitigation assistance.</p>
  <p><strong>Mitigation</strong><br>Users of Airleader Master are encouraged to reach out to Airleader via email or submit a web form for more information and mitigation assistance.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/434.html">CWE-434 Unrestricted Upload of File with Dangerous Type</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Angel Lomeli of SySS GmbH reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-12</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-12</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24534
title: Siemens Polarion
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-02
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-02.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Polarion before V2506 contains a vulnerability that could allow authenticated remote attackers to conduct cross-site scripting attacks. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
  <p>The following versions of Siemens Polarion are affected:</p>
  <ul>
  <li>Polarion V2404 vers:intdot/&lt;2404.5 (CVE-2025-40587)</li>
  <li>Polarion V2410 vers:intdot/&lt;2410.2 (CVE-2025-40587)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.6</td>
  <td>Siemens</td>
  <td>Siemens Polarion</td>
  <td>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Energy, Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-40587</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected application allows arbitrary JavaScript code be included in document titles. This could allow an authenticated remote attacker to conduct a stored cross-site scripting attack by creating specially crafted document titles that are later viewed by other users of the application.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-40587">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Polarion</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Polarion V2404, Polarion V2410</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V2404.5 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V2410.2 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/79.html">CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.6</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported this vulnerability to CISA.</li>
  <li>Thales Digital Factory reported these vulnerabilities to Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-035571 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-035571 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24533
title: Siemens SINEC NMS
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-01
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-01.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Multiple Siemens products are affected by two local privilege escalation vulnerabilities which could allow an low privileged attacker to load malicious DLLs, potentially leading to arbitrary code execution with elevated privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
  <p>The following versions of Siemens SINEC NMS are affected:</p>
  <ul>
  <li>SINEC NMS: Versions prior to V4.0 SP2 (CVE-2026-25655)</li>
  <li>SINEC NMS: All Versions (CVE-2026-25656)</li>
  <li>User Management Component (UMC) vers:intdot/&lt;2.15.2.1 (CVE-2026-25656)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.8</td>
  <td>Siemens</td>
  <td>Siemens SINEC NMS</td>
  <td>Uncontrolled Search Path Element</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Information Technology, Energy, Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-25655</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrative privilege.(ZDI-CAN-28107)</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-25655">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC NMS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>SINEC NMS</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V4.0 SP2 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-25656</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with SYSTEM privileges.(ZDI-CAN-28108)</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-25656">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens SINEC NMS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>SINEC NMS, User Management Component (UMC)</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>Update to V2.15.2.1 or later version</p>
  <p><strong>Vendor fix</strong><br>Update UMC to V2.15.2.1 or later compatible version https://support.industry.siemens.com/cs/document/109996127/</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/427.html">CWE-427 Uncontrolled Search Path Element</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.8</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported these vulnerabilities to CISA.</li>
  <li>Trend Micro Zero Day Initiative reported these vulnerabilities to Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-311973 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-311973 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24539
title: Siemens Siveillance Video Management Servers
release_date: Thu, 12 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-07
ingested_at: 2026-02-19 18:03:40
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-043-07.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>The Webhooks implementation of Siveillance Video Management Servers contains a vulnerability that could allow an authenticated remote attacker with read-only privileges to achieve full access to Webhooks API. Siemens has released new versions for the affected products and recommends to update to the latest versions.</strong></p>
  <p>The following versions of Siemens Siveillance Video Management Servers are affected:</p>
  <ul>
  <li>Siveillance Video V2023 R1: All versions &lt; V23.1 HotfixRev18</li>
  <li>Siveillance Video V2023 R2: All versions &lt; V23.2 HotfixRev18</li>
  <li>Siveillance Video V2023 R3: All versions &lt; V23.3 HotfixRev23</li>
  <li>Siveillance Video V2024 R1: All versions &lt; V24.1 HotfixRev14</li>
  <li>Siveillance Video V2025: All versions &lt; V25.1 HotfixRev8</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 6.3</td>
  <td>Siemens</td>
  <td>Siemens Siveillance Video Management Servers</td>
  <td>Missing Authorization</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Germany</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-0836</a></h3>
  <div class="csaf-accordion-content">
  <p>Missing Authorization vulnerability in Milestone Systems XProtect VMS allows users with read-only access to Management Server to have full read/write access to MIP Webhooks API.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-0836">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Siemens Siveillance Video Management Servers</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Siemens</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Siveillance Video V2023 R1, Siveillance Video V2023 R2, Siveillance Video V2023 R3, Siveillance Video V2024 R1, Siveillance Video V2025</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>If, for any reason it is not possible to install the latest patch, we recommend auditing your role security settings and consider everyone with read-only access to the Management Server as having a full access to Webhooks configuration.</p>
  <p><strong>Vendor fix</strong><br>Update to V23.1 HotfixRev18 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V23.2 HotfixRev18 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V23.3 HotfixRev23 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V24.1 HotfixRev14 or later version</p>
  <p><strong>Vendor fix</strong><br>Update to V25.1 HotfixRev8 or later version</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/862.html">CWE-862 Missing Authorization</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Siemens ProductCERT reported this vulnerability to CISA.</li>
  <li>Milestone PSIRT reported this vulnerability to Siemens.</li>
  </ul>
  <hr>
  <h2>General Recommendations</h2>
  <p>As a general security measure Siemens strongly recommends to protect network access to affected products with appropriate mechanisms. It is advised to follow recommended security practices in order to run the devices in a protected IT environment.</p>
  <hr>
  <h2>Additional Resources</h2>
  <p>For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories</p>
  <hr>
  <h2>Terms of Use</h2>
  <p>The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.</p>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the exploitation risk of these vulnerabilities.</p>
  <p>Minimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolate them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <hr>
  <h2>Advisory Conversion Disclaimer</h2>
  <p>This ICSA is a verbatim republication of Siemens ProductCERT SSA-625934 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided "as-is" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.</p>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Publication Date</td>
  </tr>
  <tr>
  <td>2026-02-12</td>
  <td>2</td>
  <td>Initial CISA Republication of Siemens ProductCERT SSA-625934 advisory</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24547
title: CISA Adds Four Known Exploited Vulnerabilities to Catalog
release_date: Thu, 12 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p>
  <ul>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2024-43468" target="_blank">CVE-2024-43468</a> Microsoft Configuration Manager SQL Injection Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2025-15556" target="_blank">CVE-2025-15556</a> Notepad++ Download of Code Without Integrity Check Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2025-40536" target="_blank">CVE-2025-40536</a> SolarWinds Web Help Desk Security Control Bypass Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-20700" target="_blank">CVE-2026-20700</a> Apple Multiple Buffer Overflow Vulnerability</li>
  </ul>
  <p>These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.</p>
  <p><a href="https://www.cisa.gov/binding-operational-directive-22-01">Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</a> established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the <a href="https://www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf">BOD 22-01 Fact Sheet</a> for more information.</p>
  <p>Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog" data-entity-type="node" data-entity-uuid="79453b83-86b9-4e2f-b1ec-abf73c6eb291" data-entity-substitution="canonical" title="Known Exploited Vulnerabilities Catalog">KEV Catalog vulnerabilities</a> as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the <a href="https://www.cisa.gov/known-exploited-vulnerabilities" data-entity-type="node" data-entity-uuid="f2adba9a-0404-494c-a90c-4363a4a5c934" data-entity-substitution="canonical" title="Reducing the Significant Risk of Known Exploited Vulnerabilities">specified criteria</a>.&nbsp;</p>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/12/cisa-adds-four-known-exploited-vulnerabilities-catalog


iava_id: /node/24513
title: ​​Barriers to Secure OT Communication: Why Johnny Can’t Authenticate​
release_date: Tue, 10 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <p>CISA released the guidance, <em>Barriers to Secure OT Communication: Why Johnny Can’t Authenticate</em>, which highlights the known issues with insecure-by-design legacy industrial protocols and seeks to understand why the technology to secure these protocols is not widely adopted. CISA developed this guidance in partnership with operational technology (OT) equipment manufacturers and standard development organizations, by interviewing OT asset owners and operators to understand:&nbsp;&nbsp;</p>
  <ol>
  <li>What motivates owners and operators to secure communication, and</li>
  <li>What barriers prevent successful adoption from design through deployment and operations.&nbsp;</li>
  </ol>
  <p>Legacy OT protocols lack strong protections against data alteration, device impersonation, and unauthorized access, making critical infrastructure vulnerable to cyber threats. Securing these protocols requires solutions that are practical for current operators as well as cyber experts. Based on the research conducted, CISA provides recommendations for how owners and operators can avoid the negative experiences of their peers, as well as recommendations to OT manufacturers to drive sustainable, more usable capabilities.&nbsp;</p>





  <div class="c-file">
      <div class="c-file__download">
      <a href="https://www.cisa.gov/sites/default/files/2026-02/Barriers-to-Secure-Communication-Why-OT-Johnny-Cant-Authenticate_508_2.pdf" class="c-file__link" target="_blank">Barriers to Secure Communication: Why Johnny Can't Authenticate</a>
      <span class="c-file__size">(PDF,       907.41 KB
    )</span>
    </div>
  </div>
  <div class="c-text-cta">
  <div class="l-constrain c-text-cta__inner">
  <div class="c-text-cta__content">
  <h2>Please share your thoughts!</h2>
  <div class="c-text-cta__summary">
  <div class="c-text-cta__summary">
  <p>We welcome your feedback.</p>
  </div>
  </div>
  <p><a class="c-button c-button--on-dark" href="https://cisasurvey.gov1.qualtrics.com/jfe/form/SV_9n4TtB8uttUPaM6?product=https://cisa.gov/resources-tools/resources/barriers-secure-ot-communication-why-johnny-cant-authenticate">CISA Product Survey</a></p>
  </div>
  </div>
  </div>

source_url:
  https://www.cisa.gov/resources-tools/resources/barriers-secure-ot-communication-why-johnny-cant-authenticate


iava_id: /node/24515
title: Poland Energy Sector Cyber Incident Highlights OT and ICS Security Gaps
release_date: Tue, 10 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:40
description:
  <div class="OutlineElement Ltr SCXW155104668 BCX8">
  <p><em>The purpose of this Alert is to amplify Poland’s Computer Emergency Response Team (CERT Polska’s) Energy Sector Incident Report published on Jan. 30, 2026, and highlight key mitigations for Energy Sector stakeholders.&nbsp;</em></p>
  <p>In December 2025, a malicious cyber actor(s) targeted and compromised operational technology (OT) and industrial control systems (ICS) in Poland’s Energy Sector—specifically renewable energy plants, a combined heat and power plant, and a manufacturing sector company—in a cyber incident. The malicious cyber activity highlights the need for critical infrastructure entities with vulnerable edge devices to act now to strengthen their cybersecurity posture against cyber threat activities targeting OT and ICS.</p>
  <p>A malicious cyber actor(s) gained initial access in this incident through vulnerable internet-facing edge devices, subsequently deploying wiper malware and causing damage to remote terminal units (RTUs). The malicious cyber activity caused loss of view and control between facilities and distribution system operators, destroyed data on human machine interfaces (HMIs), and corrupted system firmware on OT devices. While the affected renewable energy systems continued production, the system operator could not control or monitor them according to their intended design.<a href="#Note1"><sup>1</sup></a></p>
  <div class="OutlineElement Ltr SCXW38387541 BCX8">
  <p>CERT Polska’s incident report highlights:</p>
  </div>
  <div class="ListContainerWrapper SCXW38387541 BCX8">
  <ul>
  <li>Vulnerable edge devices remain a prime target for threat actors.
  <ul>
  <li>As indicated by CISA’s <a href="https://www.cisa.gov/news-events/directives/bod-26-02-mitigating-risk-end-support-edge-devices">Binding Operational Directive (BOD) 26-02: Mitigating Risk From End-of-Support Edge Devices</a>, end-of-support edge devices pose significant risks.</li>
  </ul>
  </li>
  <li>OT devices without firmware verification can be permanently damaged.
  <ul>
  <li>Operators should prioritize updates that allow firmware verification when available; if updates are not immediately feasible, ensure that cyber incident response plans account for inoperative OT devices to mitigate prolonged outages.</li>
  </ul>
  </li>
  <li>Threat actors leveraged default credentials, a vulnerability not limited to specific vendors, to pivot onto the HMI and RTUs.
  <ul>
  <li>Operators should immediately change default passwords and establish requirements for integrators or OT suppliers to enforce password changes in the future.</li>
  </ul>
  </li>
  </ul>
  <p>CISA and the Department of Energy’s Office of Cybersecurity, Energy Security, and Emergency Response (DOE CESER) urge OT asset owners and operators to review the following resources for more information about the malicious activity and mitigations:</p>
  </div>
  <div class="ListContainerWrapper SCXW38387541 BCX8">
  <ul>
  <li>CERT Polska’s <a href="https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/" target="_blank">Energy Sector Incident Report - 29 December 2025</a>.</li>
  <li>CISA’s joint fact sheet with FBI, EPA, and DOE <a href="https://www.cisa.gov/resources-tools/resources/primary-mitigations-reduce-cyber-threats-operational-technology">Primary Mitigations to Reduce Cyber Threats to Operational Technology</a>.</li>
  <li>DOE’s Energy Threat Analysis Center’s threat advisories.</li>
  </ul>
  <h2><strong>Acknowledgements</strong></h2>
  <p>DOE CESER and CERT Polska contributed to this Alert.</p>
  <div class="OutlineElement Ltr SCXW147436174 BCX8">
  <h2><strong>Disclaimer</strong>&nbsp;</h2>
  <div>
  <p>The information in this report is being provided “as is” for informational purposes only. CISA does not endorse any commercial entity, product, company, or service, including any entities, products, or services linked within this document. Any reference to specific commercial entities, products, processes, or services by service mark, trademark, manufacturer, or otherwise, does not constitute or imply endorsement, recommendation, or favoring by CISA.&nbsp;</p>
  </div>
  <h2><strong>Notes</strong></h2>
  <ol>
  <li><a class="ck-anchor" id="Note1"></a>CERT Polska, “Energy Sector Incident Report - 29 December 2025,” Naukowa i Akademicka Sieć Komputerowa Poland<em>,</em> last modified January 30, 2026, <a href="https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/" target="_blank">https://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025/</a>.</li>
  </ol>
  </div>
  </div>
  </div>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/10/poland-energy-sector-cyber-incident-highlights-ot-and-ics-security-gaps


iava_id: /node/24518
title: ZLAN Information Technology Co. ZLAN5143D
release_date: Tue, 10 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-02
ingested_at: 2026-02-19 18:03:41
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-02.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of these vulnerabilities could result in an attacker bypassing authentication, or resetting the device password.</strong></p>
  <p>The following versions of ZLAN Information Technology Co. ZLAN5143D are affected:</p>
  <ul>
  <li>ZLAN5143D v1.600 (CVE-2026-25084, CVE-2026-24789)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 9.8</td>
  <td>ZLAN Information Technology Co.</td>
  <td>ZLAN Information Technology Co. ZLAN5143D</td>
  <td>Missing Authentication for Critical Function</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>China</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-25084</a></h3>
  <div class="csaf-accordion-content">
  <p>Authentication for the device can be bypassed by directly accessing internal URLs.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-25084">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>ZLAN Information Technology Co. ZLAN5143D</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>ZLAN Information Technology Co.</div>
  <div class="ics-version"><strong>Product Version:</strong><br>ZLAN Information Technology Co. ZLAN5143D: v1.600</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>ZLAN Information Technology Co. did not respond to CISA's attempts at coordination. Users of ZLAN5143D devices are encouraged to contact ZLAN and keep their systems up to date. https://www.zlmcu.com/en/contatct_us.htm</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-24789</a></h3>
  <div class="csaf-accordion-content">
  <p>An unprotected API endpoint allows an attacker to remotely change the device password without providing authentication.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-24789">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>ZLAN Information Technology Co. ZLAN5143D</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>ZLAN Information Technology Co.</div>
  <div class="ics-version"><strong>Product Version:</strong><br>ZLAN Information Technology Co. ZLAN5143D: v1.600</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Vendor fix</strong><br>ZLAN Information Technology Co. did not respond to CISA's attempts at coordination. Users of ZLAN5143D devices are encouraged to contact ZLAN and keep their systems up to date. https://www.zlmcu.com/en/contatct_us.htm</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/306.html">CWE-306 Missing Authentication for Critical Function</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>9.8</td>
  <td>CRITICAL</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Shorabh Karir and Deepak Singh reported these vulnerabilities to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24521
title: ZOLL ePCR IOS Mobile Application
release_date: Tue, 10 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-041-01
ingested_at: 2026-02-19 18:03:41
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-041-01.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to protected health information (PHI) or device telemetry.</strong></p>
  <p>The following versions of ZOLL ePCR IOS Mobile Application are affected:</p>
  <ul>
  <li>ePCR IOS Mobile Application 2.6.7 (CVE-2025-12699)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 5.5</td>
  <td>ZOLL</td>
  <td>ZOLL ePCR IOS Mobile Application</td>
  <td>Insertion of Sensitive Information into Externally-Accessible File or Directory</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Healthcare and Public Health</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United States</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-12699</a></h3>
  <div class="csaf-accordion-content">
  <p>The ZOLL ePCR IOS application reflects unsanitized user input into a WebView. Attacker-controlled strings placed into PCR fields (run number, incident, call sign, notes) are interpreted as HTML/JS when the app prints or renders that content. In the proof of concept (POC), injected scripts return local file content, which would allow arbitrary local file reads from the app's runtime context. These local files contain device and user data within the ePCR medical application, and if exposed, would allow an attacker to access protected health information (PHI) or device telemetry.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-12699">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>ZOLL ePCR IOS Mobile Application</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>ZOLL</div>
  <div class="ics-version"><strong>Product Version:</strong><br>ZOLL ePCR IOS Mobile Application: 2.6.7</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>ZOLL ePCR IOS application was decommissioned in May 2025. ZOLL has no current plans to provide a replacement application. If users have questions or concerns, they are encouraged to reach out directly to ZOLL Support. https://www.zolldata.com/contact-us.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/538.html">CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N">CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Bryan Riggins reported this vulnerability to ZOLL</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>
  <p>Do not click web links or open attachments in unsolicited email messages.</p>
  <p>Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.</p>
  <p>Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Initial Publication</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24530
title: CISA Adds Six Known Exploited Vulnerabilities to Catalog
release_date: Tue, 10 Feb 26 12:00:00 +0000
ingested_at: 2026-02-19 18:03:41
description:
  <div class="OutlineElement Ltr SCXW169298289 BCX8">
  <p>CISA has added six new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog"><u>Known Exploited Vulnerabilities (KEV) Catalog</u></a>, based on evidence of active exploitation.&nbsp;</p>
  <ul>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21510" target="_blank"><u>CVE-2026-21510</u></a> Microsoft Windows Shell Protection Mechanism Failure Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21513" target="_blank"><u>CVE-2026-21513</u></a> Microsoft MSHTML Framework Security Feature Bypass Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21514" target="_blank"><u>CVE-2026-21514</u></a> Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21519" target="_blank"><u>CVE-2026-21519</u></a> Microsoft Windows Type Confusion Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21525" target="_blank"><u>CVE-2026-21525</u></a> Microsoft Windows NULL Pointer Dereference Vulnerability</li>
  <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-21533" target="_blank"><u>CVE-2026-21533</u></a> Windows Remote Desktop Services Elevation of Privilege Vulnerability&nbsp;</li>
  </ul>
  <p>These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.&nbsp;</p>
  </div>
  <div class="OutlineElement Ltr SCXW169298289 BCX8">
  <p><a href="https://www.cisa.gov/binding-operational-directive-22-01"><u>Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</u></a> established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the <a href="https://www.cisa.gov/sites/default/files/publications/Reducing_the_Significant_Risk_of_Known_Exploited_Vulnerabilities_211103.pdf"><u>BOD 22-01 Fact Sheet</u></a> for more information.&nbsp;</p>
  </div>
  <div class="OutlineElement Ltr SCXW169298289 BCX8">
  <p>Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog"><u>KEV Catalog vulnerabilities</u></a> as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the <a href="https://www.cisa.gov/known-exploited-vulnerabilities"><u>specified criteria</u></a>.&nbsp;</p>
  </div>

source_url:
  https://www.cisa.gov/news-events/alerts/2026/02/10/cisa-adds-six-known-exploited-vulnerabilities-catalog


iava_id: /node/24520
title: AVEVA PI to CONNECT Agent
release_date: Tue, 10 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-04
ingested_at: 2026-02-19 18:03:41
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-04.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could result in an unauthorized access to the proxy server.</strong></p>
  <p>The following versions of AVEVA PI to CONNECT Agent are affected:</p>
  <ul>
  <li>PI to CONNECT Agent &lt;=v2.4.2520 (CVE-2026-1495)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 6.5</td>
  <td>AVEVA</td>
  <td>AVEVA PI to CONNECT Agent</td>
  <td>Insertion of Sensitive Information into Log File</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United Kingdom</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1495</a></h3>
  <div class="csaf-accordion-content">
  <p>The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI to CONNECT event log files. This could enable unauthorized access to the proxy server.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1495">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>AVEVA PI to CONNECT Agent</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>AVEVA</div>
  <div class="ics-version"><strong>Product Version:</strong><br>AVEVA PI to CONNECT Agent: &lt;=v2.4.2520</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>AVEVA recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation.</p>
  <p><strong>Vendor fix</strong><br>Users of affected product versions should apply security updates to mitigate the risk of proxy details exposure in newly generated PI to CONNECT Agent event logs.</p>
  <p><strong>Vendor fix</strong><br>Users who have used affected product versions, should review existing PI to CONNECT Agent event logs (live/backups/copies) for exposed proxy connection details and consider purging the sensitive data from logs and/or configuring new credentials for access to the proxy service.</p>
  <p><strong>Mitigation</strong><br>The following general defensive measures are recommended:</p>
  <p><strong>Mitigation</strong><br>Remove use of plain text passwords in proxy URLs. Alternatively, if passwords are required by the proxy, then use least-privilege credentials.</p>
  <p><strong>Mitigation</strong><br>Ensure only trusted users are given Event Log Reader (S-1-5-32-573) privileges on hosts where PI to CONNECT is installed.</p>
  <p><strong>Mitigation</strong><br>Review existing PI to CONNECT event logs (live/backups/copies) for exposed proxy connection details and consider purging the sensitive data from logs and/or configuring new credentials for access to the proxy service.</p>
  <p><strong>Vendor fix</strong><br>All affected versions can be fixed by upgrading to PI to CONNECT Agent v2.5.2790 or higher. The latestversion of the agent can be downloaded from the CONNECT Data Services Portal here: https://datahub.connect.aveva.com/.</p>
  <p><strong>Mitigation</strong><br>For additional information please refer to AVEVA-2026-003 https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-003.pdf.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/532.html">CWE-532 Insertion of Sensitive Information into Log File</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N">CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>AVEVA reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Initial Republication of AVEVA-2026-003</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24519
title: AVEVA PI Data Archive
release_date: Tue, 10 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-03
ingested_at: 2026-02-19 18:03:41
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-03.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of this vulnerability could result in a denial-of-service condition.</strong></p>
  <p>The following versions of AVEVA PI Data Archive are affected:</p>
  <ul>
  <li>PI Data Archive PI Server &lt;=2018_SP3_Patch_7 (CVE-2026-1507)</li>
  <li>PI Data Archive PI Server 2023 (CVE-2026-1507)</li>
  <li>PI Data Archive PI Server 2023_Patch_1 (CVE-2026-1507)</li>
  <li>PI Data Archive PI Server 2024 (CVE-2026-1507)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 7.5</td>
  <td>AVEVA</td>
  <td>AVEVA PI Data Archive</td>
  <td>Uncaught Exception</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>United Kingdom</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2026-1507</a></h3>
  <div class="csaf-accordion-content">
  <p>The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial of service.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2026-1507">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>AVEVA PI Data Archive</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>AVEVA</div>
  <div class="ics-version"><strong>Product Version:</strong><br>AVEVA PI Data Archive PI Server: &lt;=2018_SP3_Patch_7, AVEVA PI Data Archive PI Server: 2023, AVEVA PI Data Archive PI Server: 2023_Patch_1, AVEVA PI Data Archive PI Server: 2024</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>AVEVA recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation. Users of affected product versions should apply security updates to mitigate the risk of exploit.</p>
  <p><strong>Mitigation</strong><br>All impacted versions of PI Data Archive can be fixed by upgrading to PI Server 2024 R2 or later available here: https://softwaresupportsp.aveva.com/en-US/downloads/products/details/8c9b0e8c-eb68-481f-b420-c87a253a4172.</p>
  <p><strong>Mitigation</strong><br>PI Data Archive delivered by PI Server 2018 SP3 Patch 7 and prior can be fixed by upgrading to PI Server 2018 SP3 Patch 8 or higher available here: https://softwaresupportsp.aveva.com/en-US/downloads/products/details/79492560-7e4c-4800-8bd7-40cce61a17d2.</p>
  <p><strong>Mitigation</strong><br>The following general defensive measures are recommended:</p>
  <p><strong>Mitigation</strong><br>Monitor liveness of services listed in your installation's "\PI\adm\pisrvstart.bat".</p>
  <p><strong>Mitigation</strong><br>Set the PI Data Archive Subsystem services to automatically restart.</p>
  <p><strong>Mitigation</strong><br>PI Data Archive nodes should limit port 5450 inbound access to trusted workstations, users, and software.</p>
  <p><strong>Mitigation</strong><br>For additional information please refer to AVEVA-2026-002(https://www.aveva.com/content/dam/aveva/documents/support/cyber-security-updates/SecurityBulletin_AVEVA-2026-002.pdf).</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/248.html">CWE-248 Uncaught Exception</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>AVEVA reported this vulnerability to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Initial Republication of AVEVA-2026-002</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


iava_id: /node/24517
title: Yokogawa FAST/TOOLS
release_date: Tue, 10 Feb 26 12:00:00 +0000
source_url: https://www.cisa.gov/news-events/ics-advisories/icsa-26-041-01
ingested_at: 2026-02-19 18:03:41
description:
  <p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-041-01.json"><strong>View CSAF</strong></a></p>
  <h2>Summary</h2>
  <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to redirected users to malicious sites, decrypt communications, perform a man-in-the-middle (MITM) attack, execute malicious scripts, steal files, and perform other various attacks.</strong></p>
  <p>The following versions of Yokogawa FAST/TOOLS are affected:</p>
  <ul>
  <li>FAST/TOOLS &gt;=R9.01|&lt;=R10.04 (CVE-2025-66594, CVE-2025-66595, CVE-2025-66597, CVE-2025-66598, CVE-2025-66599, CVE-2025-66600, CVE-2025-66601, CVE-2025-66602, CVE-2025-66603, CVE-2025-66604, CVE-2025-66605, CVE-2025-66606, CVE-2025-66607, CVE-2025-66608)</li>
  </ul>
  <div class="csaf-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
  <th role="columnheader">Vendor</th>
  <th role="columnheader">Equipment</th>
  <th role="columnheader">Vulnerabilities</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>v3 8.2</td>
  <td>Yokogawa</td>
  <td>Yokogawa FAST/TOOLS</td>
  <td>Generation of Error Message Containing Sensitive Information, Cross-Site Request Forgery (CSRF), Use of a Broken or Risky Cryptographic Algorithm, Exposure of Sensitive System Information to an Unauthorized Control Sphere, Improperly Implemented Security Check for Standard, Reliance on IP Address for Authentication, Cleartext Transmission of Sensitive Information, Exposure of Private Personal Information to an Unauthorized Actor, Improper Neutralization of Invalid Characters in Identifiers in Web Pages, Path Traversal: '\..\filename'</td>
  </tr>
  </tbody>
  </table>
  </div>
  <h3>Background</h3>
  <ul>
  <li><strong>Critical Infrastructure Sectors: </strong>Critical Manufacturing, Energy, Food and Agriculture</li>
  <li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
  <li><strong>Company Headquarters Location: </strong>Japan</li>
  </ul>
  <hr>
  <h2>Vulnerabilities</h2>
  <div class="csaf-accordion">
  <p><a class="csaf-accordion-toggle-all" href="#">Expand All +</a></p>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66594</a></h3>
  <div class="csaf-accordion-content">
  <p>Detailed messages are displayed on the error page. This information could be exploited by an attacker for other attacks.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66594">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/209.html">CWE-209 Generation of Error Message Containing Sensitive Information</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66595</a></h3>
  <div class="csaf-accordion-content">
  <p>This product is vulnerable to cross-site request forgery (CSRF). When a user accesses a link crafted by an attacker, the user's account could be compromised.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66595">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/352.html">CWE-352 Cross-Site Request Forgery (CSRF)</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66597</a></h3>
  <div class="csaf-accordion-content">
  <p>This product supports weak cryptographic algorithms, potentially allowing an attacker to decrypt communications with the web server.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66597">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/327.html">CWE-327 Use of a Broken or Risky Cryptographic Algorithm</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.2</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66598</a></h3>
  <div class="csaf-accordion-content">
  <p>This product supports old SSL/TLS versions, potentially allowing an attacker to decrypt communications with the web server.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66598">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/327.html">CWE-327 Use of a Broken or Risky Cryptographic Algorithm</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.1</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66599</a></h3>
  <div class="csaf-accordion-content">
  <p>Physical paths could be displayed on web pages. This information could be exploited by an attacker for other attacks.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66599">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/497.html">CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66600</a></h3>
  <div class="csaf-accordion-content">
  <p>This product lacks HSTS (HTTP Strict Transport Security) configuration. When an attacker performs a Man in the middle (MITM) attack, communications with the web server could be sniffed.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66600">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/358.html">CWE-358 Improperly Implemented Security Check for Standard</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>8.2</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66601</a></h3>
  <div class="csaf-accordion-content">
  <p>This product does not specify MIME types. When an attacker performs a content sniffing attack, malicious scripts could be executed.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66601">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/358.html">CWE-358 Improperly Implemented Security Check for Standard</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>6.5</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66602</a></h3>
  <div class="csaf-accordion-content">
  <p>The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by the worm.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66602">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/291.html">CWE-291 Reliance on IP Address for Authentication</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>5.3</td>
  <td>MEDIUM</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66603</a></h3>
  <div class="csaf-accordion-content">
  <p>The web server accepts the OPTIONS method. An attacker could potentially use this information to carry out other attacks.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66603">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/358.html">CWE-358 Improperly Implemented Security Check for Standard</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.1</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66604</a></h3>
  <div class="csaf-accordion-content">
  <p>The library version could be displayed on the web page. This information could be exploited by an attacker for other attacks.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66604">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/319.html">CWE-319 Cleartext Transmission of Sensitive Information</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.1</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66605</a></h3>
  <div class="csaf-accordion-content">
  <p>Since there are input fields on this web page with the autocomplete attribute enabled, the input content could be saved in the browser the user is using.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66605">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/359.html">CWE-359 Exposure of Private Personal Information to an Unauthorized Actor</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.1</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66606</a></h3>
  <div class="csaf-accordion-content">
  <p>This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66606">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/86.html">CWE-86 Improper Neutralization of Invalid Characters in Identifiers in Web Pages</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.4</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66607</a></h3>
  <div class="csaf-accordion-content">
  <p>The response header contains an insecure setting. Users could be redirected to malicious sites by an attacker.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66607">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/358.html">CWE-358 Improperly Implemented Security Check for Standard</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>3.7</td>
  <td>LOW</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N">CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  <div class="csaf-accordion-item">
  <h3><a class="csaf-accordion-toggle" href="#">CVE-2025-66608</a></h3>
  <div class="csaf-accordion-content">
  <p>This product fails to adequately validate URLs. An attacker could send maliciously crafted requests to gain unauthorized access to files on the web server.</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2025-66608">View CVE Details</a></p>
  <hr>
  <h4>Affected Products</h4>
  <h5>Yokogawa FAST/TOOLS</h5>
  <div class="ics-vendor-version-status">
  <div class="ics-vendor"><strong>Vendor:</strong><br>Yokogawa</div>
  <div class="ics-version"><strong>Product Version:</strong><br>Yokogawa FAST/TOOLS: &gt;=R9.01|&lt;=R10.04</div>
  <div class="ics-status"><strong>Product Status:</strong><br>known_affected</div>
  </div>
  <div class="ics-remediations">
  <h6>Remediations</h6>
  <p><strong>Mitigation</strong><br>Yokogawa recommends users update to revision R10.04 and apply patch software (CS_e12787). After the patch is applied, users should apply R10.04 SP3.</p>
  <p><strong>Mitigation</strong><br>Yokogawa strongly recommends that all users establish and maintain a comprehensive security program, not just for addressing the vulnerability identified in this YSAR. Security program components include patch updates, antivirus software, backup and recovery solutions, zoning, hardening, whitelisting, firewalls, and other related measures. Yokogawa can assist organizations in setting up and continuously maintaining a security program. As a starting point for developing the most effective risk mitigation plan, Yokogawa offers security risk assessment services.</p>
  <p><strong>Mitigation</strong><br>For questions related to this report, please contact Yokogawa https://contact.yokogawa.com/cs/gw?c-id=000498.</p>
  </div>
  <p><strong>Relevant CWE:</strong> <a href="https://cwe.mitre.org/data/definitions/29.html">CWE-29 Path Traversal: '\..\filename'</a></p>
  <hr>
  <h4>Metrics</h4>
  <div class="csaf-table csaf-metrics-table">
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">CVSS Version</th>
  <th role="columnheader">Base Score</th>
  <th role="columnheader">Base Severity</th>
  <th role="columnheader">Vector String</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>3.1</td>
  <td>7.5</td>
  <td>HIGH</td>
  <td><a href="https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N">CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N</a></td>
  </tr>
  </tbody>
  </table>
  </div>
  </div>
  </div>
  </div>
  <hr>
  <h2>Acknowledgments</h2>
  <ul>
  <li>Yokogawa reported these vulnerabilities to CISA</li>
  </ul>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>
  <p>This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy &amp; Use policy (https://www.cisa.gov/privacy-policy).</p>
  <hr>
  <h2>Recommended Practices</h2>
  <p>CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:</p>
  <p>Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the Internet.</p>
  <p>Locate control system networks and remote devices behind firewalls and isolating them from business networks.</p>
  <p>When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.</p>
  <p>CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.</p>
  <p>CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.</p>
  <p>CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.</p>
  <p>Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.</p>
  <p>Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.</p>
  <p>CISA also recommends users take the following measures to protect themselves from social engineering attacks:</p>
  <p>Do not click web links or open attachments in unsolicited email messages.</p>
  <p>Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.</p>
  <p>Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.</p>
  <p>No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.</p>
  <hr>
  <h2>Revision History</h2>
  <ul>
  <li><strong>Initial Release Date: </strong>2026-02-10</li>
  </ul>
  <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
  <thead>
  <tr>
  <th role="columnheader" data-tablesaw-priority="persist">Date</th>
  <th role="columnheader">Revision</th>
  <th role="columnheader">Summary</th>
  </tr>
  </thead>
  <tbody>
  <tr>
  <td>2026-02-10</td>
  <td>1</td>
  <td>Initial Republication of YSAR-26-0001-E</td>
  </tr>
  </tbody>
  </table>
  <hr>
  <h2>Legal Notice and Terms of Use</h2>


