GCVE-110-NCSC-2025-187

Advisory PublishedCVSS 7.8/10

Vulnetix · Advisory published June 10, 2025

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Download JSON Open in Console

Weaknesses (CWE)

CWE-311Missing Encryption of Sensitive DataCWE-125Out-of-bounds ReadCWE-416Use After FreeCWE-122Heap-based Buffer OverflowCWE-325Missing Cryptographic StepCWE-190Integer Overflow or WraparoundCWE-73External Control of File Name or PathCWE-400Uncontrolled Resource ConsumptionCWE-201Insertion of Sensitive Information Into Sent DataCWE-222Truncation of Security-relevant InformationCWE-304Missing Critical Step in AuthenticationCWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')CWE-20Improper Input ValidationCWE-787Out-of-bounds WriteCWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-404Improper Resource Shutdown or ReleaseCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-476NULL Pointer DereferenceCWE-268Privilege ChainingCWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-703Improper Check or Handling of Exceptional ConditionsCWE-466Return of Pointer Value Outside of Expected RangeCWE-940Improper Verification of Source of a Communication ChannelCWE-130Improper Handling of Length Parameter InconsistencyCWE-269Improper Privilege ManagementCWE-667Improper LockingCWE-129Improper Validation of Array IndexCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-911Improper Update of Reference CountCWE-770Allocation of Resources Without Limits or ThrottlingCWE-332Insufficient Entropy in PRNGCWE-371-CWE-665Improper InitializationCWE-121Stack-based Buffer OverflowCWE-310-CWE-366Race Condition within a ThreadCWE-863Incorrect AuthorizationCWE-276Incorrect Default Permissions

Risk Scores

CVSS 3.1

7.8/10

High · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Siemens	vers:siemens/7.4.3	—	—
Siemens	vers:unknown/<v1.3.0	—	—
Siemens	vers:all/<v3.2	—	—
Siemens	vers:unknown/none	—	—
Siemens	vers:siemens/3.1.0	—	—
Siemens	vers:all/>=v3.1.0	—	—
Siemens	vers:unknown/1.0	—	—
Siemens	vers:all/<v2404.0013	—	—
Siemens	vers:all/*	—	—
Siemens	vers:all/<v3.1	—	—
Siemens	vers:unknown/*	—	—
Siemens	vers:siemens/3.0.0	—	—
Siemens	vers:unknown/<v1.1	—	—

Aliases

CVE-2021-41617 CVE-2023-28531 CVE-2023-38545 CVE-2023-38546 CVE-2023-44487 CVE-2023-4527 CVE-2023-46218 CVE-2023-46219 CVE-2023-4806 CVE-2023-48795 CVE-2023-4911 CVE-2023-51384 CVE-2023-51385 CVE-2023-52927 CVE-2023-5363 CVE-2023-6246 CVE-2023-6779 CVE-2023-6780 CVE-2024-12133 CVE-2024-12243 CVE-2024-24855 CVE-2024-26596 CVE-2024-28085 CVE-2024-2961 CVE-2024-33599 CVE-2024-33600 CVE-2024-33601 CVE-2024-33602 CVE-2024-34397 CVE-2024-37370 CVE-2024-37371 CVE-2024-41797 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2024-50246 CVE-2024-53166 CVE-2024-57977 CVE-2024-57996 CVE-2024-58005 CVE-2024-6119 CVE-2024-6387 CVE-2025-0133 CVE-2025-21701 CVE-2025-21702 CVE-2025-21712 CVE-2025-21724 CVE-2025-21728 CVE-2025-21745 CVE-2025-21756 CVE-2025-21758 CVE-2025-21765 CVE-2025-21766 CVE-2025-21767 CVE-2025-21795 CVE-2025-21796 CVE-2025-21848 CVE-2025-21862 CVE-2025-21864 CVE-2025-21865 CVE-2025-26465 CVE-2025-31115 CVE-2025-32454 CVE-2025-40567 CVE-2025-40568 CVE-2025-40569 CVE-2025-40585 CVE-2025-4373 CVE-2025-4598 CVE-2025-46836

References

advisory

Browse GCVE Records

74,585 records in the GCVE database · Updated July 24, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON