Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

11 records in Scalance Xb-200 Firmware · all components

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2022-16670 CVE-2022-36323 · GHSA-qj75-j4wq-j748

Injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 45

Affected devices do not properly sanitize an input field.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01934 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-74
TI-2021-07799 CVE-2021-25667 · GHSA-p672-97f8-chmq

Stack-based buffer overflow in Siemens RUGGEDCOM RM1224

Priority MEDIUM 42

A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All ve…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00945 Published 2021-03-15 Fixed in V4.1, V6.2 CWE-121
TI-2019-13921 CVE-2019-19301 · GHSA-j5jq-7977-4wm2

Uncontrolled resource consumption in Siemens SCALANCE X200-4P IRT

Priority LOW 36

A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALANCE X204-2FM, SCALANC…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01361 Published 2020-04-14 Fixed in V5.5.0, V5.2.5 +3 CWE-400
TI-2022-16672 CVE-2022-36325 · GHSA-9r25-j996-8h38

Cross-site scripting in Siemens RUGGEDCOM RM1224 LTE EU

Priority LOW 34

Affected devices do not properly sanitize data introduced by an user when rendering the web interface.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.01012 Published 2022-08-10 Fixed in V7.1.2, V2.3.1 +4 CWE-80
TI-2019-10380 CVE-2019-13924 · GHSA-9v8p-c94c-q287

Protection mechanism failure in Siemens SCALANCE S602

Priority LOW 26

A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (All versions < V4.1), SCALANCE X-200 switch family (…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00825 Published 2020-02-11 Fixed in V4.1, 5.2.4 +3 CWE-693
Open these records in search →