CISA + Hersteller
ICS-Advisories
Advisories speziell für industrielle Steuerungssysteme — von CISA ICS-CERT und direkt von Herstellern (darunter Siemens, ABB, Schneider Electric, WAGO und Phoenix Contact) — einschließlich Revisionshistorie (Erstveröffentlichung, Update A, Update B) und verknüpfter CVEs.
1
Gefunden
Advisory-Daten: Live-Anbindung— zuletzt abgerufen: 8. November 2026 um 08:18.
Filter
1 aktiv1 Advisories gefunden
SSA-434797
SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens Products
Veröffentlicht
9. Juni 2026
Letzte Aktualisierung
13. Oktober 2026
Verknüpfte CVEs
Betroffene Sektoren
Risk Evaluation
OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
Zusammenfassung der Gegenmaßnahmen
As a defense-in-depth measure, organizations may review whether affected systems are exposed to untrusted CMS/PKCS#7 content from external sources.
Revisionshistorie (4)
Erstveröffentlichung — 9. Juni 2026
Publication Date
Update A — 14. Juli 2026
Added SCALANCE X-200 family, X-200IRT family, X-200RNA family, X-300/408 family, SC-600 family to Known Not Affected and fix for SINUMERIK Access MyMachine /OPC UA , SIMOVE Fleetmanager. Updated remediation to No fix planned for SIMATIC Comfort/Mobile RT
Update B — 11. August 2026
Added RUGGEDCOM ROX II family and SIMATIC HMI Operator Device to Known Not Affected and removed SIMATIC Comfort/Mobile RT and updated SIMATIC Advanced HMI Panels and SIMATIC HMI Basic Panels to no fix available; Added fix for SIMATIC PDM V9.3 and added PCS neo V6.0 and Simatic Logon to affected products.
Update C — 8. September 2026
Updated remediation for AI Lightweight Inference Server to no fix planned.