VDB
ICSA-25-226-21
ICSA-25-226-21
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Siemens BFCClient contains multiple vulnerabilities in the integrated OpenSSL component that could allow an attacker to read memory contents, to change the application behaviour or to create a denial of service condition. Siemens has released a new version for BFCClient and recommends to update to the latest version.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| BFCClient |
Timeline
- Aug 12, 2025 CVE Published
References
- https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf url
- https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf url
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsa-25-226-21.json advisory
- https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01 url
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices url
- https://cert-portal.siemens.com/productcert/csaf/ssa-028723.json advisory
- https://cert-portal.siemens.com/productcert/html/ssa-028723.html advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-21 advisory
- https://www.cisa.gov/topics/industrial-control-systems url
- https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B url