NCSC-2025-0382

Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.

De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

• Denial-of-Service (DoS)
• Manipulatie van gegevens
• Omzeilen van een beveiligingsmaatregel
• (Remote) code execution (root/admin rechten)
• Toegang tot systeemgegevens
• Toegang tot gevoelige gegevens
• Verhogen van rechten

De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.

Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.

medium

high

Improper Input Validation

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Control of Generation of Code ('Code Injection')

Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Stack-based Buffer Overflow

Out-of-bounds Read

Buffer Over-read

Improper Validation of Array Index

Improper Neutralization of Parameter/Argument Delimiters

Improper Neutralization of Escape, Meta, or Control Sequences

Improper Handling of Case Sensitivity

Integer Overflow or Wraparound

Integer Underflow (Wrap or Wraparound)

Integer Coercion Error

Off-by-one Error

Exposure of Sensitive Information to an Unauthorized Actor

Insertion of Sensitive Information Into Sent Data

Observable Discrepancy

Observable Response Discrepancy

Improper Removal of Sensitive Information Before Storage or Transfer

CWE-264

Privilege Chaining

Privilege Dropping / Lowering Errors

Incorrect Default Permissions

Improper Preservation of Permissions

Improper Access Control

Improper Authorization

Improper Authentication

Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass by Capture-replay

Improper Certificate Validation

Incorrect Implementation of Authentication Algorithm

Missing Authentication for Critical Function

CWE-310

Missing Encryption of Sensitive Data

Cleartext Transmission of Sensitive Information

Use of a Broken or Risky Cryptographic Algorithm

Use of Weak Hash

Generation of Predictable Numbers or Identifiers

Improper Verification of Cryptographic Signature

Cross-Site Request Forgery (CSRF)

Improper Validation of Integrity Check Value

Improperly Implemented Security Check for Standard

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Session Fixation

Covert Timing Channel

CWE-399

Uncontrolled Resource Consumption

Improper Resource Shutdown or Release

Inefficient Algorithmic Complexity

Missing Lock Check

Double Free

Use After Free

Expected Behavior Violation

NULL Pointer Dereference

Deserialization of Untrusted Data

Improper Initialization

Improper Locking

Exposure of Resource to Wrong Sphere

Incorrect Conversion between Numeric Types

Incorrect Permission Assignment for Critical Resource

Improper Check for Unusual or Exceptional Conditions

Release of Invalid Pointer or Reference

Allocation of Resources Without Limits or Throttling

Out-of-bounds Write

Use of Hard-coded Credentials

Loop with Unreachable Exit Condition ('Infinite Loop')

Missing Authorization

Incorrect Authorization

Missing Initialization of Resource

Server-Side Request Forgery (SSRF)

Improper Verification of Source of a Communication Channel

CWE-1214

Improper Validation of Specified Type of Input

Inefficient Regular Expression Complexity