JVNVU#93197226    
Siemens製品に対するアップデート（2026年4月）

Siemensから各製品向けのアドバイザリが公表されました。

Siemensのアドバイザリを参照してください。

新規：8件

• SSA-019200: Multiple Vulnerabilities in SCALANCE W-700 IEEE 802.11n Devices Before V6.6.0
• SSA-225816: Memory Corruption Vulnerability in RUGGEDCOM CROSSBOW Station Access Controller Before V5.8
• SSA-605717: Authorization Bypass Vulnerability in SINEC NMS Before V4.0 SP3
• SSA-609469: Authorization Bypass Vulnerability in Industrial Edge Management
• SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
• SSA-741509: Privilege Escalation Vulnerability in RUGGEDCOM CROSSBOW Secure Access Manager Primary Before V5.8
• SSA-801704: Authentication Bypass Vulnerability in SINEC NMS
• SSA-981622: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit

更新：13件

• SSA-186293: XML External Entity (XXE) Injection Vulnerability in SIMOTION SCOUT, SIMOTION SCOUT TIA and SINAMICS STARTER
• SSA-216014: Vulnerabilities in EFI variable of SIMATIC IPCs, SIMATIC Tablet PCs, and SIMATIC Field PGs
• SSA-244969: OpenSSL Vulnerability in Industrial Products
• SSA-311973: Multiple Local Privilege Escalation Vulnerabilities in SINEC NMS and User Management Component (UMC)
• SSA-408105: Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Products
• SSA-552702: Privilege Escalation Vulnerability in the Web Interface of SCALANCE and RUGGEDCOM Products
• SSA-599968: Denial of Service Vulnerability in Profinet Devices
• SSA-710008: Multiple Web Vulnerabilities in SCALANCE Products
• SSA-712929: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Products
• SSA-726617: Incorrect Privilege Assignment Vulnerability in Mendix OIDC SSO Module
• SSA-726834: Denial of Service Vulnerability in the RADIUS Client of SIPROTEC 5 Devices
• SSA-827968: Vulnerability in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices
• SSA-913875: Frame Aggregation and Fragmentation Vulnerabilities in 802.11

Siemensのアドバイザリを参照してください。

Siemensのアドバイザリを参照してください。