SSA-678870

Siemens Security Advisory by Siemens ProductCERT

SSA-678870: Node2Shell/Broccoli2Shell Vulnerabilities in Siemens Software Products

Publication Date:	2026-11-10
Last Update:	2026-11-10
Current Version:	V1.0
CVSS v3.1 Base Score:	9.8
CVSS v4.0 Base Score:	9.2

SUMMARY

On October 21, 2026, the Node.js project released security updates addressing a critical vulnerability in the Brotli decoder bundled with Node.js, commonly referred to as "Node2Shell" (tracked as CVE-2026-111497). The vulnerability is an out-of-bounds write that could allow a remote attacker to cause memory corruption and potentially execute arbitrary code. This advisory covers the status of impact of various Siemens software products.

Please also have a look on following Software Field Bulletins:

Teamcenter: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204

Polarion: https://support.sw.siemens.com/en-US/knowledge-base/PL8869197

Manufacturing Operations Center (Opcenter) and Process Preparation X: https://support.sw.siemens.com/en-US/knowledge-base/PL8869211

Siemens is preparing fixes and recommends specific mitigations for products where fixes are not or not yet available.

KNOWN AFFECTED PRODUCTS

Un-/Collapse All

Affected Product and Versions	Remediation
HyperLynx All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.
Innexis Architecture Native Acceleration 2026 All versions affected by CVE-2026-111497	Currently no fix is available
Insights Hub All versions affected by CVE-2026-111497	Currently no fix is available
Opcenter Connect Electronics All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Connect MOM All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Execution Core All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Execution Discrete All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Execution Foundation All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Execution Pharma All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Execution Process All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Intelligence All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Intra Plant Logistics All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter Quality All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter RDnL All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Opcenter X All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
PADS Pro Essentials All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.
PADS Pro Student Edition All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.
PADS Professional All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.
PAVE360 Automotive 2026 All versions affected by CVE-2026-111497	Currently no fix is available
Process Preparation X All versions affected by CVE-2026-111497	Currently no fix is available The vulnerability can be mitigated on the IIS Reverse Proxy. Please see https://support.sw.siemens.com/en-US/knowledge-base/PL8869211
Simcenter Executable Digital Twin All versions affected by CVE-2026-111497	Currently no fix is available
Simcenter Studio All versions affected by CVE-2026-111497	Currently no fix is available
Teamcenter	Show more details
Teamcenter V2412 All versions affected by CVE-2026-111497	Currently no fix is available For Teamcenter manual mitigation instructions can be found here: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204
Teamcenter V2506 All versions affected by CVE-2026-111497	Currently no fix is available For Teamcenter manual mitigation instructions can be found here: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204
Teamcenter V2512 All versions affected by CVE-2026-111497	Currently no fix is available For Teamcenter manual mitigation instructions can be found here: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204
Teamcenter V2606 All versions affected by CVE-2026-111497	Currently no fix is available For Teamcenter manual mitigation instructions can be found here: https://support.sw.siemens.com/en-US/knowledge-base/PL8869204
Xpedition Designer All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.
Xpedition Enterprise All versions affected by CVE-2026-111497	Currently no fix is available Disable brotli compression and block brotli compression at the network firewall.

KNOWN NOT AFFECTED PRODUCTS

Un-/Collapse All

Known Not Affected Products	Reason
Calibre All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Calibre ICE All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Capital All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Designcenter X Essentials All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Pathway to Learning Engineering All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Polarion All versions not affected by CVE-2026-111497	Polarion uses node.js 10.15.0 - Brotli was introduced to node.js in 10.16.0 further information: https://support.sw.siemens.com/en-US/knowledge-base/PL8869197 (Vulnerable Code Not Present)
Solid Edge All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)
Teamcenter Share All versions not affected by CVE-2026-111497	Node.js is not present (Component Not Present)

MITIGATIONS

Product-specific remediations or mitigations can be found in the section Known Affected Products.
Please follow the General Security Recommendations.

GENERAL SECURITY RECOMMENDATIONS

As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

PRODUCT DESCRIPTION

Calibre ICE (IC Cloud Enablement) enables Calibre products and other products of the IC segment to make use of cloud services.

Capital is a comprehensive E/E systems development solution for complex platforms in automotive, aerospace, and adjacent industries.

HyperLynx is an integrated family of analysis tools for PCB design, schematic capture and post-layout verification

Opcenter Execution Core (formerly known as Camstar Enterprise Platform) by Siemens PLM Software is a universal usable Manufaturing Execution System (MES). This product allows manufacturers to significantly increase the quality of a product during manufacturing process. The process begins with the planning, supply management, quality management, stretching to production and even to customer service. This effectively supports the whole product life-cycle.

Opcenter Execution Discrete (formerly known as "SIMATIC IT Unified Architecture Discrete Manufacturing") is a specialized Manufacturing Execution System addressing the needs of the discrete industry market, focusing on job-shop part manufacturing and complex manual assembly.

Opcenter Execution Process (formerly known as "SIMATIC IT Unified Architecture Process Industries") is Siemens’ MES system for the CPG and Process industries. Based on the latest technology, it enables to implement the strategy for the complete digitalization of manufacturing.

Opcenter Intelligence (formerly known as "Manufacturing Intelligence") connects, organizes and aggregates manufacturing data from disparate company sources into cohesive, intelligent and contextualized information.

Opcenter Quality is a quality management system (QMS) that enables organizations to safeguard compliance, optimize quality, reduce defect and rework costs and achieve operational excellence by increasing process stability. The integrated process capabilities (control charts, statistics, quality gates) can detect production errors to avoid further processing and shipment of nonconforming material.

Opcenter RDL (formerly known as "SIMATIC IT R&D Suite") offers companies in CPG and process industries a scalable and flexible platform to streamline, optimize, and align all formulated product data management.

Polarion is an application lifecycle management solution that improves software development processes with a single, unified solution for requirements, coding, testing, and release.

SIMATIC IT Unified Architecture Foundation (SIT UAF) is a framework to build and run state-of-the-art manufacturing operations management (MOM) applications.

Simcenter Executable Digital Twin enables real-time monitoring, prediction, and optimization of physical assets by deploying physics-based simulation models directly into operational environments.

Solid Edge is a portfolio of software tools that addresses various product development processes: 3D design, simulation, manufacturing and design management.

Teamcenter software is a modern, adaptable product lifecycle management (PLM) system that connects people and processes, across functional silos, with a digital thread for innovation.

Xpedition is an innovative PCB design flow application, providing integration from system design definition to manufacturing execution.

VULNERABILITY DESCRIPTION

Un-/Collapse All

This chapter describes all vulnerabilities (CVE-IDs) addressed in this security advisory. Wherever applicable, it also documents the product-specific impact of the individual vulnerabilities.

Vulnerability CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream.

Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

CVSS v3.1 Base Score	9.8
CVSS v3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0 Base Score	9.2
CVSS v4.0 Vector	CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE	CWE-787: Out-of-bounds Write

ADDITIONAL INFORMATION

For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

HISTORY DATA

V1.0 (2026-11-10):

Publication Date

The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.