THREAT OPS › Threat News › Siemens CADRA
Siemens CADRA
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-202-06.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>CADRA is affected by multiple zlib and Foxit vulnerabilities. Siemens has released a new version for CADRA and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasur
MITRE ATT&CK techniques
Indicators of compromise
- CVE-2005-2096cve
- CVE-2016-9840cve
- CVE-2016-9841cve
- CVE-2016-9842cve
- CVE-2017-14919cve
- CVE-2018-25032cve
- CVE-2022-37434cve
- CVE-2023-45853cve
- CVE-2025-10585cve
- CVE-2025-13223cve
- CVE-2026-22184cve
- https://www.cve.org/CVERecord?id=CVE-2005-2096url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lurl
- https://www.cve.org/CVERecord?id=CVE-2016-9840url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hurl
- https://www.cve.org/CVERecord?id=CVE-2016-9841url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hurl
- https://www.cve.org/CVERecord?id=CVE-2016-9842url
- https://www.cve.org/CVERecord?id=CVE-2017-14919url
- https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hurl
- https://www.cve.org/CVERecord?id=CVE-2018-25032url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hurl
- https://www.cve.org/CVERecord?id=CVE-2022-37434url
- https://www.cve.org/CVERecord?id=CVE-2023-45853url
- https://www.cve.org/CVERecord?id=CVE-2025-10585url
- https://www.cve.org/CVERecord?id=CVE-2025-13223url
- https://www.cve.org/CVERecord?id=CVE-2026-22184url
- https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:Nurl
- https://www.siemens.com/cert/operational-guidelines-industrial-securityurl
- https://www.siemens.com/industrialsecurityurl
- https://www.siemens.com/cert/advisoriesurl
- https://www.siemens.com/productcert/terms-of-useurl
- 1.3.1.2ipv4
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-06