Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

15 records in Apogee Modular Building Controller Firmware · all components

TI-2021-11875 CVE-2021-31886 · GHSA-p584-873g-v9x6

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 48

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03075 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2022-17998 CVE-2022-38371 · GHSA-59qg-qcpj-8hf9

Uncontrolled resource consumption in Siemens APOGEE MBC

Priority MEDIUM 47

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01598 Published 2022-10-11 Fixed in V3.5.7, V2.8.21 +5 CWE-400
TI-2021-11873 CVE-2021-31884 · GHSA-7p4v-ppf8-95r7

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE…

Priority MEDIUM 45

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11879 CVE-2021-31890 · GHSA-4mmq-7ch6-8958

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

Priority MEDIUM 44

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02221 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-240
TI-2021-11878 CVE-2021-31889 · GHSA-9f8q-4pw9-8433

Integer underflow in Siemens Capital Embedded AR Classic 431-422

Priority MEDIUM 43

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02175 Published 2021-11-09 Fixed in V2303, V0.5.0.0 CWE-191
TI-2021-11877 CVE-2021-31888 · GHSA-825j-f8cf-xxrr

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 43

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02449 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11876 CVE-2021-31887 · GHSA-q5r7-v53q-5pgx

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 43

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02449 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11490 CVE-2021-31346 · GHSA-gwc7-j4mc-q8fw

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

Priority MEDIUM 43

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01965 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-1284
TI-2021-11872 CVE-2021-31883 · GHSA-9p2c-f575-r7xw

Memory corruption in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01526 Published 2021-11-09 Fixed in V2303 CWE-119
TI-2021-11871 CVE-2021-31882 · GHSA-w2w7-g4vg-h87m

Memory corruption in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01525 Published 2021-11-09 Fixed in V2303 CWE-119
TI-2021-11870 CVE-2021-31881 · GHSA-x327-px9p-wgr2

Out-of-bounds read in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01526 Published 2021-11-09 Fixed in V2303 CWE-125
TI-2021-11874 CVE-2021-31885 · GHSA-fc2w-gxv3-9vh5

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE…

Priority LOW 35

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01237 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +2 CWE-805
TI-2021-11488 CVE-2021-31344 · GHSA-47j6-w2j2-7jxf

Type confusion in Siemens Capital Embedded AR Classic 431-422

Priority LOW 33

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01456 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-843
TI-2019-10392 CVE-2019-13939 · GHSA-jpvr-c9fc-2r4h

Improper input validation in Siemens APOGEE MEC/MBC/PXC

Priority LOW 32

A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00715 Published 2020-01-16 Fixed in V2.8.2, V3.5.3 +5 CWE-20
Open these records in search →