These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-40759 is a high-severity vulnerability in Siemens TIA Portal ecosystem products, published 2025-08-12 and last modified 2025-12-09. The flaw stems from improper sanitization of stored security properties when parsing project files, enabling type confusion and arbitrary code execution within the affected application context. The attack vector is local, requiring user interaction to open a maliciou [truncated]
An access control vulnerability in the CLI functionality of Siemens RUGGEDCOM APE1808 allows authenticated users with limited privileges to bypass intended restrictions and execute administrative commands. This improper authorization flaw, published 2025-08-12, enables privilege escalation with network-based attack vectors requiring only low-privileged authentication. The vulnerability carries HIGH severi [truncated]
A client-side path traversal vulnerability in the Siemens RUGGEDCOM APE1808 web management interface front-end allows authenticated attackers with limited privileges to craft malicious URLs that, when visited by an authenticated victim, execute Cross-Site Scripting (XSS) attacks. The vulnerability stems from missing input validation on a parameter in the web interface. Published on 2025-08-12 and last mod [truncated]
A vulnerability in the Linux kernel's GFS2 (Global File System 2) implementation has been resolved. The issue occurred when flipping the GFS2_DIF_JDATA flag on an inode, which could lead to mixing incompatible page structures—buffer heads versus iomap_folio_state structs—in the address space. The fix ensures the address space is truncated when this flag changes, preventing structural inconsistency that co [truncated]
A softlockup vulnerability in the Linux kernel's fs/proc subsystem, specifically in the __read_vmcore function, affects Siemens industrial networking products running SINEC OS. The vulnerability can cause a denial-of-service condition through high availability impact when exploited locally with high privileges.
CVE-2025-21692 is a high-severity vulnerability (CVSS 7.8) in the Linux kernel's network traffic scheduler, specifically affecting the Enhanced Transmission Selection (ETS) queuing discipline (qdisc). The flaw involves out-of-bounds (OOB) indexing in the ETS qdisc implementation, which could allow a local attacker with low privileges to achieve high-impact consequences including confidentiality breach, in [truncated]
CVE-2025-21687 is a vulnerability in the Linux kernel's VFIO platform driver where read/write syscall parameters (count and offset) passed from user space were not properly validated against device bounds. While offset was capped to 40 bits, count remained unchecked, enabling out-of-bounds read/write operations on the device. The vulnerability was resolved by adding proper bounds checking. Siemens has ide [truncated]
An access control vulnerability in the Request Trace and Download Trace functionalities of CMC before 25.1.0 allows authenticated users with limited privileges to request and download trace files due to improper access restrictions, potentially exposing unauthorized network data. The vulnerability was published on 2025-08-12 and last modified on 2026-01-14. Siemens has released a vendor fix in version 25. [truncated]
CVE-2024-7264 is a low-severity memory-safety issue in libcurl’s ASN.1 Generalized Time parsing logic as shipped in Siemens SINEC OS. Siemens and CISA describe a path where syntactically incorrect ASN.1 time data can cause the parser to treat a time-fraction length as -1, leading to strlen() being called on a heap buffer that is not intentionally NUL-terminated. The most likely outcome is a crash; under C [truncated]
CVE-2024-6874 describes an out-of-bounds stack read in libcurl’s URL API when punycode conversion is performed with the macidn IDN backend and the input is exactly 256 bytes. In Siemens’ advisory coverage, the issue is tied to affected Siemens networking products running impacted SINEC OS firmware. The practical security concern is unintended disclosure of stack contents through a returned string, not cod [truncated]
CVE-2024-6232 is a Regular Expression Denial of Service (ReDoS) vulnerability in CPython's tarfile module, affecting Siemens industrial networking products. The vulnerability stems from regular expressions in tarfile.TarFile header parsing that permit excessive backtracking when processing specifically-crafted tar archives. An unauthenticated remote attacker can exploit this flaw to cause high availabilit [truncated]
CVE-2024-6197 is a Siemens industrial product vulnerability tied to libcurl's ASN.1 UTF-8 parsing. A malformed ASN.1 field can make utf8asn1str() return an error after invoking free() on a 4-byte local stack buffer. On many systems that causes an immediate abort; on some allocator implementations it can corrupt nearby stack memory. The most likely outcome is a crash or service outage, but the advisory doe [truncated]
CVE-2024-57951 is a high-severity vulnerability in the Linux kernel's high-resolution timer (hrtimer) subsystem, specifically affecting CPU hotplug handling. The flaw occurs when a CPU transitions from CPUHP_ONLINE to CPUHP_HRTIMERS_PREPARE during a hotunplug operation, then returns to online state without properly resetting per-CPU state. This leaves stale state including dangling pointers, causes CFS to [truncated]
A vulnerability in the Linux kernel's arm64 ptrace implementation, specifically within the tagged_addr_ctrl_set() function, allows potential memory leakage from the kernel stack. The issue stems from an uninitialized variable that can expose up to 64 bits of memory when a zero-length SETREGSET call is made. Siemens has identified this vulnerability as affecting certain industrial networking products runni [truncated]
CVE-2024-56785 describes issues with PCIe port nodes for ls7a in the MIPS Loongson64 Device Tree Source (DTS). The vulnerability was originally published on 2025-08-12 and last modified on 2026-02-25. According to the source advisory, this CVE is marked as **Misinformed** in the threat assessment, indicating it does not represent a genuine security vulnerability requiring remediation. The advisory (ICSA-2 [truncated]
This CVE addresses a Linux kernel quota subsystem issue where quota_release_work is not properly flushed during quota writeback operations. The vulnerability exists in the call path: freeze_super() → sync_filesystem() → ext4_sync_fs() → dquot_writeback_dquots(). This flaw could potentially lead to denial of service conditions during filesystem freeze operations on affected Siemens industrial networking pr [truncated]
## Summary CVE-2024-56779 is a vulnerability in the Linux kernel's NFS server (nfsd) that can cause a memory leak of nfs4_openowner structures when concurrent nfsd4_open operations occur. The issue manifests during forced unmount operations (umount -f), where the system attempts to kill all RPC tasks even if the unmount ultimately fails due to open files. This can result in duplicate RPC tasks being sent [truncated]
A vulnerability in the Linux kernel's netem (network emulator) scheduler can cause network interfaces to stop transferring packets entirely, resulting in a denial-of-service condition. The flaw occurs when the child queueing discipline (qdisc) and tfifo (time-ordered FIFO) are empty, but the 'qlen' counter incorrectly indicates the tfifo has reached its limit, preventing further packet acceptance. This ef [truncated]
CVE-2024-56756 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's NVMe PCI driver affecting Siemens industrial networking products. The flaw stems from an incorrect size parameter passed to dma_free_coherent() during Host Memory Buffer (HMB) descriptor table deallocation. Specifically, __nvme_alloc_host_mem() may allocate fewer descriptors than originally planned, yet the original (larger [truncated]
A medium-severity vulnerability in the Linux kernel's CAAM (Cryptographic Accelerator and Assurance Module) driver affects Siemens industrial networking products. The issue stems from passing an incorrect parameter type to devm_add_action_or_reset(), which can lead to improper resource release. This local vulnerability requires low privileges to exploit and could result in high availability impact. Siemen [truncated]
A memory leak vulnerability exists in the Linux kernel SCSI QEDF driver within the qedf_alloc_and_init_sb() function. The flaw occurs when DMA memory allocated for sb_virt is not released upon function failure, leading to resource exhaustion. The fix adds dma_free_coherent() to properly free memory on error paths, consistent with similar functions qedr_alloc_mem_sb() and qede_alloc_mem_sb(). Siemens has a [truncated]
A memory leak vulnerability exists in the Linux kernel's SCSI QEDI driver within the qedi_alloc_and_init_sb() function. The flaw occurs when DMA memory allocated for sb_virt is not released upon function failure, leading to resource exhaustion over time. The vulnerability was addressed by adding dma_free_coherent() to properly free the allocated memory on error paths, consistent with similar functions in [truncated]
A vulnerability in the Linux kernel's Real-Time Clock (RTC) subsystem affects Siemens industrial networking products. When the `__rtc_read_time` function fails, the `rtc_timer_do_work()` function does not validate the return value, leaving the `struct rtc_time tm` variable potentially uninitialized or containing invalid data from RTC hardware. Subsequent conversion via `rtc_tm_to_ktime()` can produce an e [truncated]
A missing error-pointer validation in the octeontx2-pf Ethernet driver (otx2_ethtool.c) allows a local attacker to trigger a denial-of-service condition. The flaw occurs when otx2_mbox_get_rsp() returns an error pointer that is subsequently dereferenced without checking, leading to a kernel crash. This vulnerability affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCO [truncated]
This CVE addresses a vulnerability in the Intel SoC PMIC BXTWC driver (mfd: intel_soc_pmic_bxtwc) related to IRQ domain handling for the TMU (Thermal Management Unit) device. The issue stems from an implementation flaw in converting the driver to use a hierarchy of IRQ chips, which resulted in platform_get_irq() generating WARN() messages on IRQ 0—a value that should represent a valid Linux virtual IRQ (v [truncated]
CVE-2024-56723 is a medium-severity vulnerability (CVSS 5.5) affecting the Intel SoC PMIC BXTWC driver in the Linux kernel. The issue stems from an implementation flaw in the driver's conversion to use IRQ domain hierarchy for PMIC devices, where platform_get_irq() triggers warnings on IRQ 0—a value that should represent a valid Linux virtual IRQ number rather than an error condition. This vulnerability w [truncated]
CVE-2024-56720 is a MEDIUM-severity vulnerability (CVSS 5.5) affecting Siemens industrial networking products running SINEC OS. The vulnerability resides in the Linux kernel's BPF (Berkeley Packet Filter) sockmap subsystem, specifically in the bpf_msg_pop_data function. Multiple implementation flaws in sk_msg_shift_left can lead to memory management errors, including improper page reference handling and i [truncated]
CVE-2024-56705 is a medium-severity vulnerability (CVSS 5.5) in the Linux kernel's media/atomisp driver, specifically within the ia_css_3a_statistics_allocate() function. The flaw stems from a missing null check on the allocation result for rgby_data memory. If allocation fails, a subsequent assertion in ia_css_s3a_hmem_decode() triggers, causing a denial-of-service condition through system instability or [truncated]
CVE-2024-56704 describes a double-free condition in the 9p/xen subsystem where IRQ (Interrupt Request) resources were being freed twice, as indicated by kernel log messages. The vulnerability was published on August 12, 2025, and last modified on February 25, 2026. The issue affects Siemens industrial networking products running SINEC OS, specifically the RUGGEDCOM RST2428P and SCALANCE XC-300/XR-300/XC-4 [truncated]
This CVE describes a kernel-level locking issue in the Linux powerpc/pseries subsystem. The dtl_access_lock is implemented as a spinlock, but the code calls kmalloc() while holding it, which can sleep. This violates kernel locking rules and can lead to system instability or deadlock conditions. The issue was originally published on 2025-08-12 and last modified on 2026-02-25. Siemens has assessed this CVE [truncated]