Skip to content

OpenSSL Vulnerability - 20260624001

Overview

OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions.

What is vulnerable?

Product(s) Affected Version(s) CVE CVSS Severity
Siemens Products using OpenSSL CISA Multiple products and versions CVE-2025-15467 9.8 Critical

What has been observed?

The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.

Recommendation

The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):

Additional References