Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

14 records in Automation License Manager · all components

TI-2022-21296 CVE-2022-43514 · GHSA-9pw2-prwg-r2jf

Path traversal in Siemens Automation License Manager V5

MEDIUM 46

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01607 Published 2023-01-10 Fixed in V3.1.2 CWE-22

TI-2018-08180 CVE-2018-11455 · GHSA-q23v-cmj9-h93q

Path traversal in Siemens Automation License Manager 5, Automation License Manager 6

MEDIUM 46

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1).

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.05239 Published 2018-08-07 No fix listed CWE-22

TI-2016-07037 CVE-2016-8565 · GHSA-ggh9-7q27-c7v4

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write…

MEDIUM 45

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete directories via crafted packets.

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02909 Published 2016-10-13 No fix listed CWE-284

TI-2022-21295 CVE-2022-43513 · GHSA-3mf9-jjrh-xqv8

A vulnerability has been identified in Automation License Manager V5 (All versions)…

MEDIUM 44

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Upd4), TeleControl Server Basic V3 (All versions < V3.1.2).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00992 Published 2023-01-10 Fixed in V3.1.2 CWE-73

TI-2011-03900 CVE-2011-4529 · GHSA-5f2r-rx93-xgcp

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through…

MEDIUM 43

Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06856 Published 2012-01-08 No fix listed CWE-119

TI-2016-07035 CVE-2016-8563 · GHSA-q9gx-mx48-xpg2

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers…

LOW 38

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafted packets to TCP port 4410.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02993 Published 2016-10-13 No fix listed CWE-20

TI-2021-07791 CVE-2021-25659 · GHSA-qhxf-2fw5-w33w

Uncontrolled resource consumption in Siemens Automation License Manager 5

LOW 35

A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01037 Published 2021-08-10 No fix listed CWE-400

TI-2020-06105 CVE-2020-7583 · GHSA-5jq7-2p53-83g6

Improper authorization in Siemens Automation License Manager 5

LOW 34

A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00268 Published 2020-08-14 Fixed in V6.0.8 CWE-285

TI-2011-03902 CVE-2011-4531 · GHSA-px66-m46c-vmhx

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers…

LOW 34

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2)…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08406 Published 2012-01-08 No fix listed CWE-20

TI-2016-07036 CVE-2016-8564 · GHSA-pp9j-r5qv-wgcj

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3…

LOW 31

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL commands via crafted traffic to TCP port 4410.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01142 Published 2016-10-13 No fix listed CWE-89

TI-2011-03901 CVE-2011-4530 · GHSA-9wc8-4g2q-8xv5

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy…

LOW 30

Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fiel…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0408 Published 2012-01-08 No fix listed CWE-20

TI-2018-08181 CVE-2018-11456 · GHSA-qwxx-q8h8-xx3q

Improper access control in Siemens Automation License Manager 5

LOW 29

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4).

CVSS 3.0MEDIUM 5.8 Network No auth No interaction EPSS 0.01257 Published 2018-08-07 No fix listed CWE-284

TI-2011-03903 CVE-2011-4532 · GHSA-44rr-xjrr-2j22

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in…

LOW 29

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager (ALM) 2.0 through 5.1+SP1+Upd2 allows remote attac…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03214 Published 2012-01-08 No fix listed CWE-22

TI-2012-03999 CVE-2012-4691 · GHSA-3g8v-fw4m-xm3p

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows…

LOW 18

Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory consumption) via crafted packets.

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00892 Published 2012-12-18 No fix listed CWE-399

Open these records in search →

Critical	333
High	1406
Medium	690
Low	59
No CVSS	0