{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "nl", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." }, { "category": "description", "text": "Siemens heeft kwetsbaarheden verholpen in diverse producten als Industrial Edge Management, Mendix, SIMATIC, SIPROTEC en Siveillance.", "title": "Feiten" }, { "category": "description", "text": "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Cross-Site-Scripting (XSS)\n- Cross-Site Request Forgery (CSRF)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", "title": "Interpretaties" }, { "category": "description", "text": "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", "title": "Oplossingen" }, { "category": "description", "text": "CVE's toe te voegen:\n\nCVE-2024-12569, CVE-2024-45385, CVE-2024-47100, CVE-2024-53649, CVE-2024-56841", "title": "Dreigingsinformatie" }, { "category": "general", "text": "medium", "title": "Kans" }, { "category": "general", "text": "high", "title": "Schade" }, { "category": "general", "text": "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')", "title": "CWE-90" }, { "category": "general", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" }, { "category": "general", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" }, { "category": "general", "text": "Cross-Site Request Forgery (CSRF)", "title": "CWE-352" }, { "category": "general", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "Nationaal Cyber Security Centrum", "namespace": "https://www.ncsc.nl/" }, "references": [ { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-194557.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-314390.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-404759.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-416411.pdf" }, { "category": "external", "summary": "Reference - ncscclear", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-717113.pdf" } ], "title": "Kwetsbaarheden verholpen in Siemens producten", "tracking": { "current_release_date": "2025-01-14T11:54:04.658073Z", "id": "NCSC-2025-0008", "initial_release_date": "2025-01-14T11:54:04.658073Z", "revision_history": [ { "date": "2025-01-14T11:54:04.658073Z", "number": "0", "summary": "Initiele versie" } ], "status": "final", "version": "1.0.0" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "simatic_s7-1200_cpu_1215fc_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1215fc_dc_dc_rly", "product_id": "CSAFPID-1712865", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1215fc_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1217c_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1217c_dc_dc_dc", "product_id": "CSAFPID-1712866", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1217c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1212_ac_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1212_ac_dc_rly", "product_id": "CSAFPID-1712886", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1212_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1212_dc_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1212_dc_dc_rly", "product_id": "CSAFPID-1712887", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1212_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1212c_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1212c_dc_dc_dc", "product_id": "CSAFPID-1712888", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1212c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1212c_dc_dc_dc_rail", "product": { "name": "siplus_s7-1200_cpu_1212c_dc_dc_dc_rail", "product_id": "CSAFPID-1712889", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1212c_dc_dc_dc_rail:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214_ac_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1214_ac_dc_rly", "product_id": "CSAFPID-1712890", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1214_dc_dc_dc", "product_id": "CSAFPID-1712891", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214_dc_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1214_dc_dc_rly", "product_id": "CSAFPID-1712892", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214c_dc_dc_dc_rail", "product": { "name": "siplus_s7-1200_cpu_1214c_dc_dc_dc_rail", "product_id": "CSAFPID-1712893", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214c_dc_dc_dc_rail:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214fc_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1214fc_dc_dc_dc", "product_id": "CSAFPID-1712894", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214fc_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1214fc_dc_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1214fc_dc_dc_rly", "product_id": "CSAFPID-1712895", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1214fc_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1215_ac_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1215_ac_dc_rly", "product_id": "CSAFPID-1712896", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1215_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1215_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1215_dc_dc_dc", "product_id": "CSAFPID-1712897", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1215_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1215_dc_dc_rly", "product": { "name": "siplus_s7-1200_cpu_1215_dc_dc_rly", "product_id": "CSAFPID-1712898", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1215_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1215c_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1215c_dc_dc_dc", "product_id": "CSAFPID-1712899", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1215c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siplus_s7-1200_cpu_1215fc_dc_dc_dc", "product": { "name": "siplus_s7-1200_cpu_1215fc_dc_dc_dc", "product_id": "CSAFPID-1712900", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siplus_s7-1200_cpu_1215fc_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_6md84__cp300_", "product": { "name": "siprotec_5_6md84__cp300_", "product_id": "CSAFPID-1615375", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_6md84__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_6md85__cp300_", "product": { "name": "siprotec_5_6md85__cp300_", "product_id": "CSAFPID-1615379", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_6md85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_6md86__cp300_", "product": { "name": "siprotec_5_6md86__cp300_", "product_id": "CSAFPID-1615383", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_6md86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_6md89__cp300_", "product": { "name": "siprotec_5_6md89__cp300_", "product_id": "CSAFPID-1615385", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_6md89__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_6mu85__cp300_", "product": { "name": "siprotec_5_6mu85__cp300_", "product_id": "CSAFPID-1615387", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_6mu85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ke85__cp300_", "product": { "name": "siprotec_5_7ke85__cp300_", "product_id": "CSAFPID-1615391", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ke85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sa82__cp100_", "product": { "name": "siprotec_5_7sa82__cp100_", "product_id": "CSAFPID-1615393", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sa82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sa82__cp150_", "product": { "name": "siprotec_5_7sa82__cp150_", "product_id": "CSAFPID-1615395", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sa82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sa86__cp300_", "product": { "name": "siprotec_5_7sa86__cp300_", "product_id": "CSAFPID-1615400", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sa86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sa87__cp300_", "product": { "name": "siprotec_5_7sa87__cp300_", "product_id": "CSAFPID-1615404", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sa87__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sd82__cp100_", "product": { "name": "siprotec_5_7sd82__cp100_", "product_id": "CSAFPID-1615406", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sd82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sd82__cp150_", "product": { "name": "siprotec_5_7sd82__cp150_", "product_id": "CSAFPID-1615408", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sd82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sd86__cp300_", "product": { "name": "siprotec_5_7sd86__cp300_", "product_id": "CSAFPID-1615414", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sd86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sd87__cp300_", "product": { "name": "siprotec_5_7sd87__cp300_", "product_id": "CSAFPID-1615418", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sd87__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj81__cp100_", "product": { "name": "siprotec_5_7sj81__cp100_", "product_id": "CSAFPID-1615420", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj81__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj81__cp150_", "product": { "name": "siprotec_5_7sj81__cp150_", "product_id": "CSAFPID-1615422", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj81__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj82__cp100_", "product": { "name": "siprotec_5_7sj82__cp100_", "product_id": "CSAFPID-1615424", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj82__cp150_", "product": { "name": "siprotec_5_7sj82__cp150_", "product_id": "CSAFPID-1615426", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj85__cp300_", "product": { "name": "siprotec_5_7sj85__cp300_", "product_id": "CSAFPID-1615430", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sj86__cp300_", "product": { "name": "siprotec_5_7sj86__cp300_", "product_id": "CSAFPID-1615434", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sj86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sk82__cp100_", "product": { "name": "siprotec_5_7sk82__cp100_", "product_id": "CSAFPID-1615436", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sk82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sk82__cp150_", "product": { "name": "siprotec_5_7sk82__cp150_", "product_id": "CSAFPID-1615437", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sk82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sk85__cp300_", "product": { "name": "siprotec_5_7sk85__cp300_", "product_id": "CSAFPID-1615439", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sk85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sl82__cp100_", "product": { "name": "siprotec_5_7sl82__cp100_", "product_id": "CSAFPID-1615440", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sl82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sl82__cp150_", "product": { "name": "siprotec_5_7sl82__cp150_", "product_id": "CSAFPID-1615441", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sl82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sl86__cp300_", "product": { "name": "siprotec_5_7sl86__cp300_", "product_id": "CSAFPID-1615443", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sl86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sl87__cp300_", "product": { "name": "siprotec_5_7sl87__cp300_", "product_id": "CSAFPID-1615445", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sl87__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ss85__cp300_", "product": { "name": "siprotec_5_7ss85__cp300_", "product_id": "CSAFPID-1615447", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ss85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7st85__cp300_", "product": { "name": "siprotec_5_7st85__cp300_", "product_id": "CSAFPID-1615449", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7st85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7st86__cp300_", "product": { "name": "siprotec_5_7st86__cp300_", "product_id": "CSAFPID-1615450", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7st86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sx82__cp150_", "product": { "name": "siprotec_5_7sx82__cp150_", "product_id": "CSAFPID-1615451", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sx82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sx85__cp300_", "product": { "name": "siprotec_5_7sx85__cp300_", "product_id": "CSAFPID-1615452", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sx85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7sy82__cp150_", "product": { "name": "siprotec_5_7sy82__cp150_", "product_id": "CSAFPID-1749292", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7sy82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7um85__cp300_", "product": { "name": "siprotec_5_7um85__cp300_", "product_id": "CSAFPID-1615453", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7um85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "industrial_edge_management_os__iem-os_", "product": { "name": "industrial_edge_management_os__iem-os_", "product_id": "CSAFPID-1637818", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:industrial_edge_management_os__iem-os_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "mendix_ldap", "product": { "name": "mendix_ldap", "product_id": "CSAFPID-1749293", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:mendix_ldap:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1211c_ac_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1211c_ac_dc_rly", "product_id": "CSAFPID-1712848", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1211c_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1211c_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1211c_dc_dc_dc", "product_id": "CSAFPID-1712849", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1211c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1211c_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1211c_dc_dc_rly", "product_id": "CSAFPID-1712850", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1211c_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1212c_ac_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1212c_ac_dc_rly", "product_id": "CSAFPID-1712851", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1212c_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1212c_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1212c_dc_dc_dc", "product_id": "CSAFPID-1712852", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1212c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1212c_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1212c_dc_dc_rly", "product_id": "CSAFPID-1712853", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1212c_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1212fc_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1212fc_dc_dc_dc", "product_id": "CSAFPID-1712854", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1212fc_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1212fc_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1212fc_dc_dc_rly", "product_id": "CSAFPID-1712855", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1212fc_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1214c_ac_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1214c_ac_dc_rly", "product_id": "CSAFPID-1712856", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1214c_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1214c_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1214c_dc_dc_dc", "product_id": "CSAFPID-1712857", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1214c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1214c_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1214c_dc_dc_rly", "product_id": "CSAFPID-1712858", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1214c_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1214fc_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1214fc_dc_dc_dc", "product_id": "CSAFPID-1712859", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1214fc_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1214fc_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1214fc_dc_dc_rly", "product_id": "CSAFPID-1712860", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1214fc_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1215c_ac_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1215c_ac_dc_rly", "product_id": "CSAFPID-1712861", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1215c_ac_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1215c_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1215c_dc_dc_dc", "product_id": "CSAFPID-1712862", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1215c_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1215c_dc_dc_rly", "product": { "name": "simatic_s7-1200_cpu_1215c_dc_dc_rly", "product_id": "CSAFPID-1712863", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1215c_dc_dc_rly:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "simatic_s7-1200_cpu_1215fc_dc_dc_dc", "product": { "name": "simatic_s7-1200_cpu_1215fc_dc_dc_dc", "product_id": "CSAFPID-1712864", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:simatic_s7-1200_cpu_1215fc_dc_dc_dc:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ut82__cp100_", "product": { "name": "siprotec_5_7ut82__cp100_", "product_id": "CSAFPID-1615454", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ut82__cp100_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ut82__cp150_", "product": { "name": "siprotec_5_7ut82__cp150_", "product_id": "CSAFPID-1615455", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ut82__cp150_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ut85__cp300_", "product": { "name": "siprotec_5_7ut85__cp300_", "product_id": "CSAFPID-1615457", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ut85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ut86__cp300_", "product": { "name": "siprotec_5_7ut86__cp300_", "product_id": "CSAFPID-1615459", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ut86__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ut87__cp300_", "product": { "name": "siprotec_5_7ut87__cp300_", "product_id": "CSAFPID-1615461", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ut87__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7ve85__cp300_", "product": { "name": "siprotec_5_7ve85__cp300_", "product_id": "CSAFPID-1615462", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7ve85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7vk87__cp300_", "product": { "name": "siprotec_5_7vk87__cp300_", "product_id": "CSAFPID-1615464", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7vk87__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_7vu85__cp300_", "product": { "name": "siprotec_5_7vu85__cp300_", "product_id": "CSAFPID-1615465", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_7vu85__cp300_:*:*:*:*:*:*:*:*" } } }, { "category": "product_name", "name": "siprotec_5_compact_7sx800__cp050_", "product": { "name": "siprotec_5_compact_7sx800__cp050_", "product_id": "CSAFPID-1615468", "product_identification_helper": { "cpe": "cpe:2.3:a:siemens:siprotec_5_compact_7sx800__cp050_:*:*:*:*:*:*:*:*" } } } ], "category": "vendor", "name": "siemens" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-12569", "cwe": { "id": "CWE-532", "name": "Insertion of Sensitive Information into Log File" }, "notes": [ { "category": "other", "text": "Insertion of Sensitive Information into Log File", "title": "CWE-532" } ], "references": [ { "category": "self", "summary": "CVE-2024-12569", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-12569.json" } ], "title": "CVE-2024-12569" }, { "cve": "CVE-2024-45385", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "title": "CWE-79" } ], "product_status": { "known_affected": [ "CSAFPID-1637818" ] }, "references": [ { "category": "self", "summary": "CVE-2024-45385", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45385.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C", "baseScore": 4.7, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1637818" ] } ], "title": "CVE-2024-45385" }, { "cve": "CVE-2024-47100", "cwe": { "id": "CWE-352", "name": "Cross-Site Request Forgery (CSRF)" }, "notes": [ { "category": "other", "text": "Cross-Site Request Forgery (CSRF)", "title": "CWE-352" } ], "product_status": { "known_affected": [ "CSAFPID-1712848", "CSAFPID-1712849", "CSAFPID-1712850", "CSAFPID-1712851", "CSAFPID-1712852", "CSAFPID-1712853", "CSAFPID-1712854", "CSAFPID-1712855", "CSAFPID-1712856", "CSAFPID-1712857", "CSAFPID-1712858", "CSAFPID-1712859", "CSAFPID-1712860", "CSAFPID-1712861", "CSAFPID-1712862", "CSAFPID-1712863", "CSAFPID-1712864", "CSAFPID-1712865", "CSAFPID-1712866", "CSAFPID-1712886", "CSAFPID-1712887", "CSAFPID-1712888", "CSAFPID-1712889", "CSAFPID-1712890", "CSAFPID-1712891", "CSAFPID-1712892", "CSAFPID-1712893", "CSAFPID-1712894", "CSAFPID-1712895", "CSAFPID-1712896", "CSAFPID-1712897", "CSAFPID-1712898", "CSAFPID-1712899", "CSAFPID-1712900" ] }, "references": [ { "category": "self", "summary": "CVE-2024-47100", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47100.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C", "baseScore": 7.1, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1712848", "CSAFPID-1712849", "CSAFPID-1712850", "CSAFPID-1712851", "CSAFPID-1712852", "CSAFPID-1712853", "CSAFPID-1712854", "CSAFPID-1712855", "CSAFPID-1712856", "CSAFPID-1712857", "CSAFPID-1712858", "CSAFPID-1712859", "CSAFPID-1712860", "CSAFPID-1712861", "CSAFPID-1712862", "CSAFPID-1712863", "CSAFPID-1712864", "CSAFPID-1712865", "CSAFPID-1712866", "CSAFPID-1712886", "CSAFPID-1712887", "CSAFPID-1712888", "CSAFPID-1712889", "CSAFPID-1712890", "CSAFPID-1712891", "CSAFPID-1712892", "CSAFPID-1712893", "CSAFPID-1712894", "CSAFPID-1712895", "CSAFPID-1712896", "CSAFPID-1712897", "CSAFPID-1712898", "CSAFPID-1712899", "CSAFPID-1712900" ] } ], "title": "CVE-2024-47100" }, { "cve": "CVE-2024-53649", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "notes": [ { "category": "other", "text": "Files or Directories Accessible to External Parties", "title": "CWE-552" } ], "product_status": { "known_affected": [ "CSAFPID-1615375", "CSAFPID-1615379", "CSAFPID-1615383", "CSAFPID-1615385", "CSAFPID-1615387", "CSAFPID-1615391", "CSAFPID-1615393", "CSAFPID-1615395", "CSAFPID-1615400", "CSAFPID-1615404", "CSAFPID-1615406", "CSAFPID-1615408", "CSAFPID-1615414", "CSAFPID-1615418", "CSAFPID-1615420", "CSAFPID-1615422", "CSAFPID-1615424", "CSAFPID-1615426", "CSAFPID-1615430", "CSAFPID-1615434", "CSAFPID-1615436", "CSAFPID-1615437", "CSAFPID-1615439", "CSAFPID-1615440", "CSAFPID-1615441", "CSAFPID-1615443", "CSAFPID-1615445", "CSAFPID-1615447", "CSAFPID-1615449", "CSAFPID-1615450", "CSAFPID-1615451", "CSAFPID-1615452", "CSAFPID-1749292", "CSAFPID-1615453", "CSAFPID-1615454", "CSAFPID-1615455", "CSAFPID-1615457", "CSAFPID-1615459", "CSAFPID-1615461", "CSAFPID-1615462", "CSAFPID-1615464", "CSAFPID-1615465", "CSAFPID-1615468" ] }, "references": [ { "category": "self", "summary": "CVE-2024-53649", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53649.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-1615375", "CSAFPID-1615379", "CSAFPID-1615383", "CSAFPID-1615385", "CSAFPID-1615387", "CSAFPID-1615391", "CSAFPID-1615393", "CSAFPID-1615395", "CSAFPID-1615400", "CSAFPID-1615404", "CSAFPID-1615406", "CSAFPID-1615408", "CSAFPID-1615414", "CSAFPID-1615418", "CSAFPID-1615420", "CSAFPID-1615422", "CSAFPID-1615424", "CSAFPID-1615426", "CSAFPID-1615430", "CSAFPID-1615434", "CSAFPID-1615436", "CSAFPID-1615437", "CSAFPID-1615439", "CSAFPID-1615440", "CSAFPID-1615441", "CSAFPID-1615443", "CSAFPID-1615445", "CSAFPID-1615447", "CSAFPID-1615449", "CSAFPID-1615450", "CSAFPID-1615451", "CSAFPID-1615452", "CSAFPID-1749292", "CSAFPID-1615453", "CSAFPID-1615454", "CSAFPID-1615455", "CSAFPID-1615457", "CSAFPID-1615459", "CSAFPID-1615461", "CSAFPID-1615462", "CSAFPID-1615464", "CSAFPID-1615465", "CSAFPID-1615468" ] } ], "title": "CVE-2024-53649" }, { "cve": "CVE-2024-56841", "cwe": { "id": "CWE-90", "name": "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')" }, "notes": [ { "category": "other", "text": "Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')", "title": "CWE-90" } ], "product_status": { "known_affected": [ "CSAFPID-1749293" ] }, "references": [ { "category": "self", "summary": "CVE-2024-56841", "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-56841.json" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "baseScore": 7.4, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-1749293" ] } ], "title": "CVE-2024-56841" } ] }