A vulnerability has been identified in COMOS V10.6 (All versions < V10.6.1), COMOS V10.6 (All versions < V10.6.1), JT Bi-Directional Translator for STEP (All versions), NX V2412 (All versions < V2412.8900 with Cloud Entitlement (bundled as NX X)), NX V2506 (All versions < V2506.6000 with Cloud Entitlement (bundled as NX X)), Simcenter 3D (All versions < V2506.6000 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Femap (All versions < V2506.0002 with Cloud Entitlement (bundled as Simcenter X Mechanical)), Simcenter Studio (All versions < V2506.0001), Simcenter System Architect (All versions < V2506.0001), Tecnomatix Plant Simulation (All versions < V2504.0007). The SALT SDK is missing server certificate validation while establishing TLS connections to the authorization server. This could allow an attacker to perform a man-in-the-middle attack.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
COMOS V10.6
Vendor
Siemens
Product
COMOS V10.6
Platforms
Unknown
Default status
unknown
COMOS V10.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.6.1
Unavailable
None listed
COMOS V10.6
Vendor
Siemens
Product
COMOS V10.6
Platforms
Unknown
Default status
unknown
COMOS V10.6 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V10.6.1
Unavailable
None listed
JT Bi-Directional Translator for STEP
Vendor
Siemens
Product
JT Bi-Directional Translator for STEP
Platforms
Unknown
Default status
unknown
JT Bi-Directional Translator for STEP · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
*
Unavailable
None listed
NX V2412
Vendor
Siemens
Product
NX V2412
Platforms
Unknown
Default status
unknown
NX V2412 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2412.8900
Unavailable
None listed
NX V2506
Vendor
Siemens
Product
NX V2506
Platforms
Unknown
Default status
unknown
NX V2506 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.6000
Unavailable
None listed
Simcenter 3D
Vendor
Siemens
Product
Simcenter 3D
Platforms
Unknown
Default status
unknown
Simcenter 3D · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.6000
Unavailable
None listed
Simcenter Femap
Vendor
Siemens
Product
Simcenter Femap
Platforms
Unknown
Default status
unknown
Simcenter Femap · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.0002
Unavailable
None listed
Simcenter Studio
Vendor
Siemens
Product
Simcenter Studio
Platforms
Unknown
Default status
unknown
Simcenter Studio · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.0001
Unavailable
None listed
Simcenter System Architect
Vendor
Siemens
Product
Simcenter System Architect
Platforms
Unknown
Default status
unknown
Simcenter System Architect · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
V2506.0001
Unavailable
None listed
Tecnomatix Plant Simulation
Vendor
Siemens
Product
Tecnomatix Plant Simulation
Platforms
Unknown
Default status
unknown
Tecnomatix Plant Simulation · Scoped product and version facts