Siemens ProductCERT security advisories
siemens-productcert · A · active
https://cert-portal.siemens.com/productcert/
Added 2026-09-29: first-party SSA advisories for Siemens OT/ICS (SIMATIC, SCALANCE, SINEC), relevant to civil protection, utilities and building automation in the constituency; CISA ICSA relays arrive later and abridged. RECIPE: `feed https://cert-portal.siemens.com/productcert/rss/advisories.atom 10` (direct; SSA-627195 dated 2026-09-28 at probe), then the SSA HTML or CSAF linked from the item. (2026-09-29 operator-directed setup review) | 2026-10-20 (2026-10-20T0256Z-intel) S1: the atom feed reads direct and lists advisory revisions; the exploitation notice for SSA-580366 is a /news/ post linked only from the advisory page HTML (`url --direct` of the SSA page), both read with `extract`. | 2026-10-31 (S1): `extract` flattens an SSA page affected-product table (product names lost); read the table with `fetch_source.py url --direct <SSA URL>`.
Cited in 7 entries
Citation cadence
Citation days per ISO week (18 weeks of coverage span, total 7).
- CVE-2026-111497, Brotli decoder flaw in Siemens industrial and software products (Desigo CC, SIMATIC WinCC, Industrial Edge, Teamcenter and Opcenter among them), Mitel MiVoice Business and OpenScape, with Cisco listing Duo Network Gateway and RoomOS in its combined advisory: Desigo CC takes the .NET updates, while most Siemens products, the Mitel updates and the Industrial Edge Common Configurator fix are still pending2026-11-07
- CVE-2026-109618 / CVE-2026-109619, PHP (PHP2Shell): two unauthenticated remote-code-execution flaws in the runtime, fixed on 2026-10-21 in 8.5.12, 8.4.27, 8.3.36 and 8.2.35, with attack traffic already observed and no upstream release for 8.1 and older (CVSS 4.0 9.2)2026-10-21
- CVE-2026-110936, Siemens Software Center: a ClickFix campaign runs a genuine signed copy of the application and side-loads its own DLLs, and Siemens confirms exploitation (CVSS 4.0 8.4)2026-10-20
- CVE-2026-58115, Siemens SIMATIC IoT2050 Advanced, Basic, M.2 and SM ship a Node-RED interface with no authentication, so one unauthenticated HTTP request runs code with maximum privileges on an OT edge gateway (CVSS 10.0); VulnCheck's canary caught exploitation2026-08-13
- CVE-2025-15467, Siemens Desigo CC: a vendored OpenSSL CMS parsing overflow gives pre-auth code execution, and the V7 family still has no fix (CVSS 9.8)2026-07-29
- CVE-2025-40948/-40947/-40949, Siemens RUGGEDCOM ROX II: Unit 42 chains three OT-switch flaws to persistent root2026-07-18
- Siemens SICAM 8 (A8000/EGS/S8000) grid RTUs: firmware-signature-validation bypass + OPC-UA-off-by-default among four CVEs (SSA-229470)2026-07-10