Multiple vulnerabilities have been identified in Siemens products including SINEC INS prior to V1.0 SP2 Update 6, SIPROTEC 5 devices, SIPROTEC 5 Compact 7SX800, and Totally Integrated Automation Portal (TIA Portal). These include buffer overflow in OpenSSL affecting Siemens products, file upload vulnerability in SIPROTEC 5 using DIGSI5 protocol, and insufficient protection of key material in WinCC Certificate Manager.
| Vendor | Product | Versions |
|---|---|---|
| siemens | sinec ins, siprotec 5, siprotec 5 compact 7sx800, totally integrated automation portal (tia portal) | SINEC INS prior to V1.0 SP2 Update 6, all versions of SIPROTEC 5 CP100 / CP150 / CP200 / CP300 / Devices, all versions of SIPROTEC 5 Compact 7SX800 (CP050), all versions of Totally Integrated Automation Portal (TIA Portal) |
