SIEMENS-SSA-633269 · Published 2025-06-10 · View on Siemens ProductCERT ↗

SSA-633269 V1.0: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1

CVSS N/A MEDIUM

Risk Summary

<p>Several Industrial Communication Devices based on SINEC OS before V3.1 contain an incorrect authorization check vulnerability that could allow an attacker to perform actions that exceed the permissions of the “guest” role.</p> <p>Siemens has released new versions for the affected products and recommends to update to the latest versions.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-633269 V1.0: Incorrect Authorization Check Vulnerability in Industrial Communication Devices based on SINEC OS before V3.1 See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more