Skip to content
Siemens Introduces Supplier-ADP for Enhanced Vulnerability Transparency

Siemens Introduces Supplier-ADP for Enhanced Vulnerability Transparency

First seen 1 Apr 2026, 22:04 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •April 2, 2026 at 22:01 UTC
  • •Siemens launched the Supplier-ADP program to improve vulnerability data transparency.
  • •CVE-2025-47809, with a CVSS score of 8.2, is a key vulnerability addressed by the program.
  • •The SADP aims to reduce false positives in vulnerability scanning for Siemens products.

In April 2026, Siemens launched the Supplier-ADP (SADP) program to enhance vulnerability transparency. This initiative, part of the CISA's 'Vulnrichment' program, allows suppliers to add context to vulnerabilities from upstream dependencies. A notable example is CVE-2025-47809, which has a CVSS score of 8.2 and originates from Wibu CodeMeter. Siemens issued advisories SSA-201595 and SSA-331739 to inform customers about affected products. The SADP aims to improve the accuracy of vulnerability scanners, increasing 'true positive' rates for Siemens products. Additionally, Siemens plans to publish lists of 'known not affected' products to reduce false positives. This development is expected to enhance the overall security posture for users of Siemens products.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 221d ago How this analysis works

Timeline

2024-01-01
CISA implemented the 'Vulnrichment' program.
2025-05-16
CVE-2025-47809 published.
2026-04-01
Siemens introduced the Supplier-ADP program.

More articles in this cluster (2)

Following this threat?

Track Siemens and CVE-2025-47809 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2