Siemens製品に対するアップデート（2026年10月）

公開日：2026/10/14 最終更新日：2026/10/14

JVNVU#90141693
Siemens製品に対するアップデート（2026年10月）

Siemensから各製品向けのアドバイザリが公表されました。

Siemensのアドバイザリを参照してください。

新規：17件

SSA-055299: Out-of-bounds Read Vulnerability in Capital Embedded AR Classic
SSB-091449: SIMATIC S7 PLCs and Related Products: Per-Variable HMI/OPC UA/Web API Access Attributes Not Enforced on PG/HMI Communication
SSA-099819: Denial of Service Vulnerability in SENTRON 3NA COM Fuse
SSA-148322: WibuKey Denial of Service Vulnerability in PSS(R)SINCAL
SSA-159454: Hard-coded Key Vulnerability in SIMATIC IPCs
SSA-333035: Multiple Vulnerabilities in APOGEE, TALON and Desigo PXC/PXM Products
SSA-377139: Path Traversal Vulnerabilities in Industrial Edge Device Kit
SSA-390352: Multiple Vulnerabilities in .NET Client Library for SIMATIC S7 Webserver API
SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7
SSA-508506: Multiple Vulnerabilities in RUGGEDCOM CROSSBOW
SSA-550198: Authenticated Remote Code Execution in WinCC
SSA-591731: Multiple Vulnerabilities in SIMATIC S7 PLCs Web Server
SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller
SSA-784472: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1.1
SSA-832641: Path Traversal Vulnerabilities in Siemens Industrial Edge Devices
SSA-911336: Multiple Vulnerabilities in Nozomi Guardian/CMC on RUGGEDCOM APE1808 Devices
SSA-968435: Multiple Vulnerabilities in Industrial Edge App Publisher

更新：21件

SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6
SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5
SSA-104023: Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
SSA-127084: Multiple Vulnerabilities in Fortigate NGFW before V7.6.7 on RUGGEDCOM APE1808 Devices
SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1
SSA-267056: Multiple Vulnerabilities in LOGO! 8 BM Devices
SSA-282044: DLL Hijacking Vulnerability in Siemens Web Installer used by the Online Software Delivery
SSA-392859: Local Arbitrary Code Execution Vulnerability in Siemens Engineering Platforms before V20
SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5
SSA-434797: Buffer Overflow Vulnerability in OpenSSL affecting Siemens Products
SSA-493396: Deserialization Vulnerability in Siemens Engineering Platforms
SSA-545643: Multiple Vulnerabilities in KACO Blueplanet Inverters
SSA-563922: Local Privilege Escalation Vulnerability in SIMOTION Tools
SSA-628843: Out of Bound Read Vulnerability in TPM 2.0
SSA-693808: Deserialization Vulnerability in Siemens Engineering Platforms
SSA-794185: RADIUS Protocol Susceptible to Forgery Attacks (CVE-2024-3596) – Impact to SIPROTEC, SICAM and Related Products
SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1
SSA-800126: Deserialization Vulnerability in Siemens Engineering Platforms before V20
SSA-858251: Authentication Bypass Vulnerabilities in OPC UA
SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices
SSA-967325: Multiple Vulnerabilities in Palo Alto Networks PAN-OS before V11.2.10-h7 on RUGGEDCOM APE1808 Devices

Siemensのアドバイザリを参照してください。

Siemensのアドバイザリを参照してください。

JPCERT 緊急報告

JPCERT REPORT

CERT Advisory

CPNI Advisory

TRnotes

CVE

JVN iPedia

JVN
HOME
JVNとは
脆弱性レポートの読み方
脆弱性レポート一覧
VN_JP
VN_JP（連絡不能）
VN_VU
VN_TA
TRnotes
JVN iPedia
MyJVN
JVNJS/RSS
ベンダ情報一覧
連絡不能開発者一覧
脆弱性情報の届出
お問合せ先

Copyright (c) 2000-2026 JPCERT/CC and IPA. All rights reserved.

出典: jvn@jvn.jp
URL: https://jvn.jp/vu/JVNVU90141693/