Siemens Healthineers

Stories

10

Products named

20

Product CVEs

23

Responses on record

0

Latest story

Oct 26, 2026

01

Vulnerability

Siemens Healthineers acknowledges critical PHP flaws CVE-2026-109618 and CVE-2026-109619

Siemens Healthineers posted an October 26, 2026 customer notification on the critical PHP flaws CVE-2026-109618 and CVE-2026-109619, with product details only on teamplay Fleet and myvarian.

Siemens Healthineers5 days ago2 min read

02

Vulnerability

Stored passwords recoverable in a Siemens imaging platform

Siemens Healthineers SSA-016040: syngo.plaza VB30E stored passwords with weak encoding, letting an attacker recover the originals and gain unauthorized access. Fixed in VB30E_HF07.

Siemens HealthineersFeb 102 min read

03

Vulnerability

Unauthenticated SQL injection into an imaging database, base score 9.8

Siemens Healthineers SHSA-160244: syngo.plaza VB30E failed to sanitize input before the SQL server, letting an unauthenticated network attacker run arbitrary SQL and compromise the whole database.

Siemens HealthineersDec 63 min read

04

Vulnerability

Siemens Healthineers discloses local privilege escalation in Medicalis Workflow Orchestrator

Siemens Healthineers advisory SHSA-501799 of July 8, 2024 discloses CVE-2024-37999, a local privilege escalation in all versions of Medicalis Workflow Orchestrator, with countermeasures where fixes are not yet available.

Siemens HealthineersJul 82 min read

05

Vulnerability

Siemens Healthineers fixes seven web service flaws in syngo Dynamics before VA40G HF01

Siemens Healthineers advisory SHSA-741697 of November 17, 2022 covers seven CVEs, CVE-2022-42732 through CVE-2022-42894, in syngo Dynamics web services before VA40G HF01, fixed by updating to the latest version.

Siemens HealthineersNov 173 min read

06

Vulnerability

Siemens Healthineers reports syngo deserialization flaw across CT, MRI, PET/CT and mammography systems

Siemens Healthineers advisory SHSA-455016 of May 31, 2022 discloses CVE-2022-29875, a deserialization flaw in the syngo platform affecting SOMATOM go., NAEOTOM Alpha, MAGNETOM NUMARIS X, MAMMOMAT Revelation and Biograph Horizon systems.

Siemens HealthineersMay 313 min read

07

Vulnerability

Siemens Healthineers lists imaging and lab products affected by DejaBlue Remote Desktop flaws

Siemens Healthineers advisory SSA-187667 of September 10, 2019 lists products including MAGNETOM, SOMATOM go., syngo.via and Atellica as affected by the DejaBlue Remote Desktop Service flaws CVE-2019-1181, CVE-2019-1182, CVE-2019-1222 and CVE-2019-1226.

Siemens HealthineersSep 103 min read

08

Vulnerability

Siemens Healthineers reports two vulnerabilities in RAPIDLab 1200 and RAPIDPoint blood gas analyzers

Siemens Healthineers advisory SSA-755010 of June 12, 2018 covers CVE-2018-4845 and CVE-2018-4846 in RAPIDLab 1200 and RAPIDPoint 400, 405 and 500 blood gas analyzers, with countermeasures recommended.

Siemens HealthineersJun 123 min read

09

Vulnerability

Siemens PET/CT and SPECT systems on Windows 7 exposed to remote code execution through third-party services

CISA advisory ICSMA-17-215-02 lists four CVSS 9.8 flaws (CVE-2015-1635, CVE-2015-1497, CVE-2015-7861, CVE-2015-7860) in the Microsoft web server and HP Client automation service on Windows 7-based Siemens PET/CT, SPECT and SPECT/CT systems. The record lists no fixed version.

CISAAug 32 min read

10

Vulnerability

Siemens PET/CT and SPECT systems on Windows XP exposed to unauthenticated remote code execution

CISA advisory ICSMA-17-215-01 covers two remotely exploitable Windows flaws, CVE-2008-4250 and CVE-2017-7269 (both CVSS v3 9.8), in all versions of Siemens' Windows XP-based PET/CT, SPECT and SPECT/CT systems and SPECT Workplaces/Symbia.net.

CISAAug 33 min read

• syngo.plaza VB30E, all versions < VB30E_HF07 PACS image archive
• Medicalis Workflow Orchestrator All versions radiology workflow software
• syngo Dynamics All versions < VA40G HF01 cardiology imaging and reporting server
• Biograph Horizon PET/CT Systems All VJ30 versions < VJ30C-UD01 PET/CT scanner
• MAGNETOM Family NUMARIS X: VA12M, VA12S, VA10B, VA20A, VA30A, VA31A MRI scanner
• MAMMOMAT Revelation All VC20 versions < VC20D mammography system
• NAEOTOM Alpha All VA40 versions < VA40 SP2 photon-counting CT scanner
• SOMATOM go. go.All, go.Now, go.Open Pro, go.Sim: all versions < VA30 SP5 or VA40 SP2 CT scanner
• MAGNETOM Vida, Sola, Lumina, Altea, Amira, Sempra: VA10A, VA10A-SP01, VA11A, VA11B, VA12M MRI scanner
• Iontris VA11, VA12, VB11 particle therapy system
• syngo.via All versions; syngo.via View & GO and WebViewer: all versions imaging reading software
• Atellica Data Manager All versions; Atellica Process Manager and Atellica Solution: all versions laboratory data manager
• Aptio Aptio by Inpeco and Aptio by Siemens: all versions laboratory automation system
• RAPIDLab 1200 All versions without Informatics products; < V3.3 with Informatics products blood gas analyzer
• RAPIDPoint RAPIDPoint 400 and 405: all versions; RAPIDPoint 500: all versions without Informatics products, =< V2.3, V2.4.X and >= V3.0 with Informatics products blood gas analyzer
• PET/CT Systems All Windows 7-based versions molecular imaging scanner
• SPECT Systems All Windows 7-based versions molecular imaging scanner
• SPECT/CT Systems All Windows 7-based versions molecular imaging scanner
• SPECT Workplaces/Symbia.net All Windows 7-based versions molecular imaging workstation
• PET/CT Systems, SPECT Systems, SPECT/CT Systems Windows XP-based, all versions molecular imaging system

Siemens Healthineers products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.