📦 Opcenter Quality

This vulnerability involves Siemens Opcenter Quality and QMS Automotive shipping with a private signing key that lacks adequate protection. Attackers could use this key to sign malicious code or data,...

This CVE describes an authorization bypass vulnerability in Siemens SmartClient modules where the server fails to enforce proper access controls on certain functionality. Authenticated attackers can e...

This CVE describes a buffer overflow vulnerability in multiple Siemens industrial automation products. An attacker can send specially crafted requests to port 4002/tcp to cause an out-of-bounds write,...

This vulnerability allows attackers to cause denial-of-service by sending specially crafted messages to port 4004/tcp on affected Siemens industrial software products. The service crashes but automati...

This CVE describes an overly permissive CORS policy vulnerability in Siemens industrial software products. An attacker could exploit this by tricking legitimate users into visiting malicious websites,...

This vulnerability affects Siemens SmartClient modules by supporting insecure TLS 1.0 and 1.1 protocols, allowing man-in-the-middle attacks that could compromise data confidentiality and integrity. Or...

This vulnerability in Siemens SmartClient modules allows authenticated attackers to access sensitive information due to inadequate encryption. Affected systems include Opcenter QL Home (SC), SOA Audit...