vulnerability
Siemens Desigo CC
High
Summary
A stack-based buffer overflow vulnerability in Siemens Desigo CC versions V7, V8, and V9 (prior to V9.0.1) has been identified, potentially allowing remote code execution. Siemens has released patches and recommends updating to the latest versions. This vulnerability stems from parsing CMS AuthEnvelopedData messages with oversized AEAD parameters, and is being addressed by Siemens ProductCERT.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data