Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

11 records in Ruggedcom Rox Ii Firmware · all components

TI-2018-03912 CVE-2018-5379 · GHSA-5prq-47x2-38gv

Double free in Quagga bgpd

Priority HIGH 69

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing cluster-list and/or unknown attributes.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.38454 Published 2018-02-19 Partial fix · 1.2.3 CWE-415
TI-2018-03924 CVE-2018-5391 · GHSA-p6x5-xg7h-fj5h

Uncontrolled resource consumption in Linux Kernel

Priority MEDIUM 57

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32445 Published 2018-09-06 Partial fix CWE-400
TI-2018-03914 CVE-2018-5381 · GHSA-g4qp-j7fc-2xcf

Infinite loop in Quagga bgpd

Priority MEDIUM 56

The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.30162 Published 2018-02-19 Partial fix · 1.2.3 CWE-228
TI-2024-37689 CVE-2024-56839 · GHSA-4xh8-gf5r-5x5p

Injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00637 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37687 CVE-2024-56837 · GHSA-qv88-4mhc-fr44

Command injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00517 Published 2025-12-09 Fixed in V2.17.0 CWE-77
TI-2024-37685 CVE-2024-56835 · GHSA-477c-gmpf-4vgp

Injection in Siemens RUGGEDCOM ROX MX5000

Priority MEDIUM 40

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00507 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37688 CVE-2024-56838 · GHSA-7g84-v2xm-86jp

Injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 39

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00391 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37690 CVE-2024-56840 · GHSA-7jwp-5g38-77m9

Injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 36

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00637 Published 2025-12-09 Fixed in V2.17.0 CWE-74
TI-2024-37686 CVE-2024-56836 · GHSA-fv2q-3g76-r9cg

Command injection in Siemens RUGGEDCOM ROX MX5000

Priority LOW 36

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (All versions < V2.17.0), RUGGEDCOM ROX RX1400 (All versions < V2.17.0), RUGGEDCOM ROX RX1500 (All versions < V…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00433 Published 2025-12-09 Fixed in V2.17.0 CWE-77
TI-2018-03913 CVE-2018-5380 · GHSA-265f-c4jh-jcfq

Out-of-bounds read in Quagga bgpd

Priority LOW 36

The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer value, based on input.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.14836 Published 2018-02-19 Partial fix · 1.2.3 CWE-125
TI-2015-04662 CVE-2015-5537 · GHSA-gmxw-f223-9jx2

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does…

Priority LOW 22

The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01139 Published 2015-08-03 No fix listed CWE-312
Open these records in search →