Siemens SINEC OS

An attacker with network access to RUGGEDCOM or SCALANCE switches running SINEC OS before version 3.1 can execute arbitrary code remotely without authentication, potentially disrupting network connectivity, altering device configuration, or interfering with connected industrial processes.

Water authorities and utilities using Siemens industrial network switches (RUGGEDCOM RST2428P, SCALANCE XCM/XRM/XCH/XRH-300 family) for critical process control network connectivity. Any facility where these switches provide network access to PLCs, RTUs, SCADA systems, or safety devices is at risk.

An attacker on the network sends a malicious packet or request to an affected switch on its network ports. The vulnerability in the third-party components within SINEC OS processes the input unsafely, allowing code execution. No authentication or special access is required.