NCSC | Beveiligingsadviezen
Bekijk RSS-feed

Beveiligingsadviezen

Download

Beveilingsadvies; NCSC-2025-0382 [1.0.0]

Beveiligingsadvies
NCSC-2025-0382 [1.0.0]
Publicatie
09-12-2025 14:15 (Europe/Amsterdam)
Prioriteit
Normaal
Betreft
Kwetsbaarheden verholpen in Siemens producten

Kenmerken

  • Improper Input Validation
  • Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
  • Improper Neutralization of Special Elements used in a Command ('Command Injection')
  • Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
  • Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
  • Improper Control of Generation of Code ('Code Injection')
  • Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
  • Improper Restriction of Operations within the Bounds of a Memory Buffer
  • Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
  • Stack-based Buffer Overflow
  • Out-of-bounds Read
  • Buffer Over-read
  • Improper Validation of Array Index
  • Improper Neutralization of Parameter/Argument Delimiters
  • Improper Neutralization of Escape, Meta, or Control Sequences
  • Improper Handling of Case Sensitivity
  • Integer Overflow or Wraparound
  • Integer Underflow (Wrap or Wraparound)
  • Integer Coercion Error
  • Off-by-one Error
  • Exposure of Sensitive Information to an Unauthorized Actor
  • Insertion of Sensitive Information Into Sent Data
  • Observable Discrepancy
  • Observable Response Discrepancy
  • Improper Removal of Sensitive Information Before Storage or Transfer
  • CWE-264
  • Privilege Chaining
  • Privilege Dropping / Lowering Errors
  • Incorrect Default Permissions
  • Improper Preservation of Permissions
  • Improper Access Control
  • Improper Authorization
  • Improper Authentication
  • Authentication Bypass Using an Alternate Path or Channel
  • Authentication Bypass by Capture-replay
  • Improper Certificate Validation
  • Incorrect Implementation of Authentication Algorithm
  • Missing Authentication for Critical Function
  • CWE-310
  • Missing Encryption of Sensitive Data
  • Cleartext Transmission of Sensitive Information
  • Use of a Broken or Risky Cryptographic Algorithm
  • Use of Weak Hash
  • Generation of Predictable Numbers or Identifiers
  • Improper Verification of Cryptographic Signature
  • Cross-Site Request Forgery (CSRF)
  • Improper Validation of Integrity Check Value
  • Improperly Implemented Security Check for Standard
  • Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
  • Session Fixation
  • Covert Timing Channel
  • CWE-399
  • Uncontrolled Resource Consumption
  • Improper Resource Shutdown or Release
  • Inefficient Algorithmic Complexity
  • Missing Lock Check
  • Double Free
  • Use After Free
  • Expected Behavior Violation
  • NULL Pointer Dereference
  • Deserialization of Untrusted Data
  • Improper Initialization
  • Improper Locking
  • Exposure of Resource to Wrong Sphere
  • Incorrect Conversion between Numeric Types
  • Incorrect Permission Assignment for Critical Resource
  • Improper Check for Unusual or Exceptional Conditions
  • Release of Invalid Pointer or Reference
  • Allocation of Resources Without Limits or Throttling
  • Out-of-bounds Write
  • Use of Hard-coded Credentials
  • Loop with Unreachable Exit Condition ('Infinite Loop')
  • Missing Authorization
  • Incorrect Authorization
  • Missing Initialization of Resource
  • Server-Side Request Forgery (SSRF)
  • Improper Verification of Source of a Communication Channel
  • CWE-1214
  • Improper Validation of Specified Type of Input
  • Inefficient Regular Expression Complexity

Omschrijving

Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

  • Denial-of-Service (DoS)
  • Manipulatie van gegevens
  • Omzeilen van een beveiligingsmaatregel
  • (Remote) code execution (root/admin rechten)
  • Toegang tot systeemgegevens
  • Toegang tot gevoelige gegevens
  • Verhogen van rechten

De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Oplossingen

Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.

Referenties

CVE's

Producten

Siemens
Building X - Security Manager Edge Controller (ACC-AP)
COMOS V10.4
COMOS V10.4.5
COMOS V10.5
COMOS V10.5.2
COMOS V10.6
Energy Services
Gridscale X Prepay
NX V2412
NX V2506
SICAM
SIMATIC CFU DIQ
SIMATIC CFU PA
SIMATIC CN 4100
SIMATIC ET 200AL IM 157-1 PN
SIMATIC MV540 H Firmware
SIMATIC PN/PN Coupler
SIMATIC S7
SINEC INS
SINEC NMS
SINEC PNI
SINEMA Remote Connect Server
SIPLUS ET 200MP IM 155-5 PN HF
SIPLUS HCS4200 CIM4210
SIPLUS NET PN/PN Coupler
SIPLUS S7-1200 CPU 1212 AC/DC/RLY
SIPLUS S7-1200 CPU 1214 AC/DC/RLY
SIPLUS S7-1200 CPU 1215 AC/DC/RLY
SIPLUS S7-1500 CPU 1511-1 PN
SIPLUS S7-300 CPU 314C-2 PN/DP
Solid Edge SE2025
Solid Edge SE2026

Disclaimer

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.