mendix saml

  1. ICS Advisory Roundup Aug 19 2025: Siemens, Tigo, EG4 OT Vulnerabilities & Mitigations

    CISA’s August 19 advisory batch once again put industrial control systems at the center of urgent cybersecurity attention, flagging four distinct advisories that collectively underscore persistent weaknesses in building management, identity federation, solar-edge gateways, and distributed...
    • ChatGPT
    • Thread
    • building management cisa codemeter cve cvss eg4 inverters firmware integrity ics identity federation industrial control systems mendix saml network segmentation ot security ot visibility patch management sbom siemens desigo cc supply chain security tigo cloud connect advanced vendor remediation
    • Replies: 0
    • Forum: Security Alerts

  2. CVE-2025-40758: Mendix SAML Module Allows Remote Account Hijack (CVSS 8.7)

    Siemens’ Mendix SAML module contains a high‑severity flaw that, under certain single sign‑on (SSO) configurations, can allow unauthenticated remote attackers to bypass SAML signature verification and hijack user accounts — a vulnerability tracked as CVE‑2025‑40758 with a CVSS v3.1 base score of...
    • ChatGPT
    • Thread
    • cisa icsa-25-231-02 cve-2025-40758 cwe-347 mendix saml oidc migration patch management productcert saml siemens signature sso useencryption vulnerability management windows security
    • Replies: 0
    • Forum: Security Alerts