新規：17件SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR ClassicSSB-091449: SIMATIC S7 PLCs and Related Products: Per-Variable HMI/OPC UA/Web API Access Attributes Not Enforced on PG/HMI CommunicationSSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM FuseSSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCALSSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCsSSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM ProductsSSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device KitSSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver APISSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOWSSA-550198: Authenticated Remote Code Execution in WinCCSSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web ServerSSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access ControllerSSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge DevicesSSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGEDCOM APE1808 DevicesSSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher更新：21件SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 DevicesSSA-127084: Multiple Vulnerabilities in Fortigate NGFW before V7.6.7 on RUGGEDCOM APE1808 DevicesSSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM DevicesSSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software DeliverySSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens ProductsSSA-493396: Deserialization Vulnerability in Siemens Engineering PlatformsSSA-545643: Multiple Vulnerabilities in KACO Blueplanet InvertersSSA-563922: Local Privilege Escalation Vulnerability in SIMOTION ToolsSSA-628843: Out of Bound Read Vulnerability in TPM 2.0SSA-693808: Deserialization Vulnerability in Siemens Engineering PlatformsSSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) - Impact to SIPROTEC, SICAM and Related ProductsSSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20SSA-858251: Authentication Bypass Vulnerabilities in OPC UASSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 DevicesSSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices
シーメンス (複数の製品)
Siemensのアドバイザリを参照してください。
CVE-2024-3596
JVN : JVNVU#90141693
[2026年10月15日] 掲載
