cve-2025-15467

Siemens Desigo CC deployments are now in scope for a critical OpenSSL vulnerability that can crash affected systems and, in some environments, may provide a route to remote code execution. The issue, tracked as CVE-2025-15467, is a stack-based buffer overflow in OpenSSL’s handling of specially...

ABB’s AC500 V3 PLC line has a critical stack buffer overflow in its Cryptographic Message Syntax parsing path, disclosed by ABB on March 12, 2026 and republished by CISA on May 12, 2026, affecting AC500 V3 PM5xxx firmware 3.9.0 and 3.9.0_HF1. The fix is AC500 V3 firmware 3.9.0 HF1, but the...