Publication Date:
Last Update:
Current Version: V1.6
Un-/Collapse All
Known Not Affected Products Reason

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
Simcenter Flomaster is not affected by the PHP issue (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by multiple CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

All versions
not affected by all CVEs
PHP is not present in this product (Component Not Present)

Please follow the General Security Recommendations.

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

CVSS v3.1 Base Score 9.8
CVSS v3.1 Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0 Base Score 9.2
CVSS v4.0 Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE CWE-416: Use After Free
CVSS v3.1 Base Score 8.1
CVSS v3.1 Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0 Base Score 9.2
CVSS v4.0 Vector CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE CWE-416: Use After Free

https://www.siemens.com/cert/advisories
V1.0 (2026-10-23): Publication Date
V1.1 (2026-10-26): Added Valor NPI, Solid Edge and Capital to "Known Not Affected Product" list
V1.2 (2026-10-27): Added Insights Hub, Simcenter Flux and Simcenter Simlab
V1.3 (2026-10-28): Added Opcenter Execution Foundation, Opcenter Quality, Opcenter Intelligence, Opcenter RDnL, AX4, Supply Chain Suite, Opcenter Intra Plant Logistics, Opcenter Connect Electronics, Xcargo, Designcenter and Designcenter X
V1.4 (2026-10-30): Added Opcenter Execution Pharma to "Known Not Affected Product" list
V1.5 (2026-11-03): Added Pathway to Learning Engineering, Teamcenter Share and Designcenter X Essentials to "Known Not Affected Product" list
V1.6 (2026-11-04): Added Opcenter Execution Process and Opcenter Execution Discrete to "Known Not Affected Product" list