Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

17 records in Opcenter Quality · all components

TI-2023-24902 CVE-2023-46281 · GHSA-9qvw-gvq6-g569

A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

Priority MEDIUM 42

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-942
TI-2023-24906 CVE-2023-46285 · GHSA-84mm-xgw8-mv4q

Improper input validation in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-20
TI-2023-24905 CVE-2023-46284 · GHSA-f2hj-x395-x532

Buffer overflow in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2020-06109 CVE-2020-7587 · GHSA-pjx6-jj7c-74m7

Uncontrolled resource consumption in Siemens Opcenter Execution Discrete

Priority MEDIUM 40

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02484 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-400
TI-2022-14854 CVE-2022-33736 · GHSA-m3xw-wjv6-wx6x

Improper authentication in Siemens Opcenter Quality V13.1

Priority LOW 36

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01323 Published 2022-07-12 Fixed in V13.1.20220624, V13.2.20220624 CWE-303
TI-2023-24904 CVE-2023-46283 · GHSA-395m-pvc6-8rvm

Buffer overflow in Siemens Opcenter Execution Foundation

Priority LOW 35

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2024-27999 CVE-2024-41979 · GHSA-xppg-xx55-6rw5

Incorrect authorization in Siemens SmartClient modules Opcenter QL Home

Priority LOW 32

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506).

CVSS 4.0HIGH 7.5 Adjacent network Low privileges No interaction EPSS 0.00191 Published 2025-08-12 Fixed in V2506 CWE-863
TI-2023-24903 CVE-2023-46282 · GHSA-fmr5-j3hh-jpg4

Cross-site scripting in Siemens Opcenter Execution Foundation

Priority LOW 32

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00492 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-79
TI-2020-06104 CVE-2020-7581 · GHSA-6pc5-ccr3-mpqp

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2)…

Priority LOW 30

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00379 Published 2020-07-14 Fixed in V3.2, V3.3 +1 CWE-428
TI-2020-06110 CVE-2020-7588 · GHSA-jgfm-rcjw-3pmx

Improper input validation in Siemens Opcenter Execution Discrete

Priority LOW 28

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02151 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-20
TI-2024-28005 CVE-2024-41985 · GHSA-vffg-826v-q23h

Insufficient session expiration in Siemens SmartClient modules Opcenter QL Home

Priority LOW 10

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >= V13.2 < V2506), SOA Cockpit (All versions >= V13.2 < V2506).

CVSS 4.0LOW 2.1 Adjacent network No auth User interaction EPSS 0.00186 Published 2025-08-12 Fixed in V2506 CWE-613
Open these records in search →