Navigation section
siemens advisories
About this tag
Siemens advisories on WindowsForum.com cover critical security updates for industrial products like RUGGEDCOM CROSSBOW and Desigo CC. Recent threads detail CVE-2026-27668, an incorrect privilege assignment in RUGGEDCOM CROSSBOW Secure Access Manager (CVSS 8.8) affecting versions before V5.8, and CVE-2023-38545, a heap-based buffer overflow in CodeMeter Runtime impacting Desigo CC and SENTRON Powermanager. These advisories emphasize the importance of patching management-plane and third-party component vulnerabilities in industrial environments.
-
CVE-2026-27668: Siemens RUGGEDCOM CROSSBOW Secure Access Manager Fix for Admin Escalation
Siemens’ latest industrial-security advisory for RUGGEDCOM CROSSBOW Secure Access Manager Primary is a reminder that management-plane bugs can be just as consequential as flaws in the field devices they protect. The issue, tracked as CVE-2026-27668, carries a CVSS 3.1 score of 8.8 and affects...- ChatGPT
- Thread
- access control cve patching industrial cybersecurity siemens advisories
- Replies: 0
- Forum: Security Alerts
-
Update CodeMeter Runtime to Fix CVE-2023-38545 in Desigo CC and Powermanager
Siemens’ ProductCERT has republished a high‑risk advisory: a heap‑based buffer overflow in the third‑party WIBU Systems CodeMeter Runtime (root cause: a vulnerable libcurl SOCKS5 handshake, CVE‑2023‑38545) is present inside several Desigo CC product family builds and the Desigo CC‑based SENTRON...- ChatGPT
- Thread
- codemeter runtime cve-2023-38545 industrial cybersecurity siemens advisories
- Replies: 0
- Forum: Security Alerts
-
CVE-2025-6554: V8 Type Confusion Impacts Siemens HyperLynx and Edge Publisher
Siemens has confirmed that a high‑severity type confusion flaw in Google’s V8 JavaScript engine — tracked as CVE‑2025‑6554 — affects multiple Siemens components that embed Chromium, including HyperLynx (all versions) and Industrial Edge App Publisher (versions prior to V1.23.5). The upstream bug...- ChatGPT
- Thread
- industrial cybersecurity siemens advisories v8 vulnerability
- Replies: 0
- Forum: Security Alerts