Skip to content

News

  • 1 min read

Vulnerabilities in the Nucleus TCP/IP Stack ("NUCLEUS:13")

Today, in coordination with Forescout, CISA and other contributors, Siemens has disclosed the security vulnerabilities CVE-2021-31344 through CVE-2021-31346 and CVE-2021-31881 through CVE-2021-31890, also named "NUCLEUS:13". The impact and remediations of these vulnerabilities in Nucleus RTOS (a real-time operating system provided by Siemens EDA, formerly Mentor Graphics) is described in SSA-044112: Multiple Vulnerabilities (NUCLEUS:13) in the TCP/IP Stack of Nucleus RTOS.

  • 1 min read

Operational Guidelines for Industrial Security

Siemens has released an updated version 2.1 of the Operational Guidelines for Industrial Security.
The guidelines provide recommendations for the secure operation of plant and machinery in industrial environments, including a 'Defense-in-Depth' security concept.
Version 2.1 replaces all former versions of the guidelines and is referenced in Siemens Security Advisories related with Siemens Industrial Products.

  • 1 min read

SIPLUS products - Advisories

SIPLUS products are rebranded standard products offering improved resistance to mechanical loads, chemical and biological substances, condensation, and temperature fluctuations. They are also designed to cope with temperatures between -40° and +70° Celsius. These devices share the same firmware than the products they are based on.

  • 1 min read

Cyber Security topics @ Siemens Healthineers

Starting by October 15 all topics related to the Siemens Healthineers Cyber Security (including security advisories) will be published at the Siemens Healthineers Cyber Security webpage. Should you have further questions regarding this announcement, please use the contact form at the Siemens Healthineers Cyber Security webpage.

  • 1 min read

URGENT/11 - Siemens Healthineers Products

Siemens Healthineers is aware of the vulnerabilities in a number of Real Time Operating Systems (RTOSs) collectively known as URGENT/11, discovered by Armis. We also understand the topic in terms of how such vulnerabilities can possibly affect medical devices, as communicated in the recent Safety Communication from the US Food & Drug Administration (FDA).

  • 1 min read

Siemens ProductCERT was awarded by Kaspersky

Siemens ProductCERT is proud to be awarded by Kaspersky for our quality, transparent vulnerability management process. We thank Kaspersky for the recognition and are happy that our efforts are perceived that way.