Veille CVE

Recherche « Siemens sinec os »

2 CVE

  1. CVE-2026-46749 9.8 Critique

    Siemens SINEC INS

    A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt shared across all users and installations, and is configured with an insufficient number of iterations. This could allow an attacker to efficiently recover user passwords using brute-force or precomputed attacks, potentially resulting in unauthorized access.

  2. CVE-2022-2586 7.8 Élevée Exploitée

    The Linux Kernel Organization linux · linux_kernel · Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens simatic s7-1500 tm mfp firmware

    It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.