{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"SIMATIC HMI MTP1900 Unified Comfort Panel hygienic (6AV2128-3UB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC AX Runtime Core Linux VMWare Development toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Unified Comfort Hygienic neutral design (6AV2128-3XB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"Desigo CC toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-34223","product":{"name":"Desigo CC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3QB27-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3MB27-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC AX Runtime Core Linux Common Debian arm64 toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Unified Comfort Panel hygienic (6AV2128-3MB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Unified Comfort Panel (6AV2128-3MB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3UB57-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3UB57-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3MB27-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3MB57-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP700 Unified Basic (6AV2123-3GB32-0AW0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Unified Comfort Hygienic (6AV2128-3XB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3QB27-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3UB27-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP700 Unified Comfort Panel (6AV2128-3GB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3QB57-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC IPC Industrial Edge Device OS (IED-OS) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Unified Basic (6AV2123-3MB32-0AW0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1000 Unified Basic (6AV2123-3KB32-0AW0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC CN 4100 versions ant\u00e9rieures \u00e0 6.0","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Unified Comfort Panel hygienic (6AV2128-3QB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP700, Unified Comfort Panel neutral design (6AV2128-3GB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Unified Comfort Panel (6AV2128-3XB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Unified Comfort Panel neutral design (6AV2128-3UB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Unified Comfort Panel neutral design (6AV2128-3XB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP400 Unified Basic (6AV2123-3DB32-0AW0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC AX Runtime Core Linux Platform Container Common Debian Development toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3XB57-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC AX Runtime Core Linux Common Debian toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3QB57-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3QB57-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3XB27-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP700 Unified Comfort Panel hygienic neutral design (6AV2128-3GB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Unified Comfort Panel hygienic neutral design (6AV2128-3QB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1000 Unified Comfort Panel hygienic (6AV2128-3KB40-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1000 Unified Comfort Panel (6AV2128-3KB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3MB57-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3UB27-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Unified Comfort Panel neutral design (6AV2128-3QB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Unified Comfort Panel (6AV2128-3QB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1000 Unified Comfort Panel hygienic neutral design (6AV2128-3KB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro for support arm (not extendable, flange on top) (6AV2128-3MB27-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Comfort Pro neutral design for support arm (expandable, round tube) and extension (6AV2128-3MB57-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC S7-1500 TM MFP (6ES7558-1AA00-0AB0) toutes versions pour la vuln\u00e9rabilit\u00e9 CVE-2026-31431","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1000, Unified Comfort Panel neutral (6AV2128-3KB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Unified Comfort Panel (6AV2128-3UB06-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Unified Comfort Panel hygienic neutral design (6AV2128-3UB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3XB27-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3XB27-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1500 Comfort Pro for stand (expandable, flange at the bottom) (6AV2128-3QB27-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3XB57-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro neutral design for stand (expandable, flange at the bottom) (6AV2128-3UB57-1BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1900 Comfort Pro for support arm (expandable, round tube) and extension unit (6AV2128-3UB27-0BX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Unified Comfort Panel neutral design (6AV2128-3MB36-0AX1) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP1200 Unified Comfort Panel hygienic neutral design (6AV2128-3MB70-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}},{"description":"SIMATIC HMI MTP2200 Comfort Pro neutral design for support arm (not extendable, flange on top) (6AV2128-3XB57-0AX0) versions ant\u00e9rieures \u00e0 21.0.2.1","product":{"name":"SIMATIC","vendor":{"name":"Siemens","scada":true}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2026-31431","url":"https://www.cve.org/CVERecord?id=CVE-2026-31431"},{"name":"CVE-2026-34223","url":"https://www.cve.org/CVERecord?id=CVE-2026-34223"}],"links":[],"reference":"CERTFR-2026-AVI-1133","revisions":[{"description":"Version initiale","revision_date":"2026-09-08T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Siemens. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire et une \u00e9l\u00e9vation de privil\u00e8ges.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits Siemens","vendor_advisories":[{"published_at":"2026-09-08","title":"Bulletin de s\u00e9curit\u00e9 Siemens SSA-330084","url":"https://cert-portal.siemens.com/productcert/html/ssa-330084.html"},{"published_at":"2026-09-08","title":"Bulletin de s\u00e9curit\u00e9 Siemens SSA-328642","url":"https://cert-portal.siemens.com/productcert/html/ssa-328642.html"}]}
