Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

12 records in Sicam Pas/pqs · all components

TI-2022-21479 CVE-2022-43724 · GHSA-gpf3-4fw6-p76w

Cleartext transmission of sensitive information in Siemens SICAM PAS/PQS

MEDIUM 50

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00669 Published 2022-12-13 Fixed in V7.0 CWE-319

TI-2016-07495 CVE-2016-9157 · GHSA-m29m-r759-256j

Improper input validation in Siemens SICAM PAS through V8.08

MEDIUM 48

A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to cause a Denial of Service condition and potentially lead to unauthenticated remote code execution by sending specially cra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03255 Published 2016-12-05 No fix listed CWE-20

TI-2016-07039 CVE-2016-8567 · GHSA-45mr-f5jj-96c9

Hard-coded credentials in Siemens SICAM PAS before 8.00

MEDIUM 46

An issue was discovered in Siemens SICAM PAS before 8.00.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01837 Published 2017-02-13 No fix listed CWE-798

TI-2022-21478 CVE-2022-43723 · GHSA-wmxm-7j47-5ww2

Improper input validation in Siemens SICAM PAS/PQS

MEDIUM 41

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00988 Published 2022-12-13 Fixed in V7.0 CWE-1287

TI-2018-03434 CVE-2018-4858 · GHSA-pq3v-xpfj-jcqv

Improper access control in Siemens IEC 61850 system configurator, DIGSI 5 , DIGSI 4…

LOW 38

A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is incorporated) (All versions < V7.80), DIGSI 4 (All versions < V4.93), SIC…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01806 Published 2018-07-09 No fix listed CWE-284

TI-2023-24216 CVE-2023-45205 · GHSA-f4jh-j7c5-g9fp

Incorrect permission assignment in Siemens SICAM PAS/PQS

LOW 35

A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00175 Published 2023-10-10 Fixed in V8.20 CWE-732

TI-2022-21477 CVE-2022-43722 · GHSA-q34j-q58v-2jmm

Uncontrolled search path in Siemens SICAM PAS/PQS

LOW 35

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00224 Published 2022-12-13 Fixed in V7.0 CWE-427

TI-2016-07494 CVE-2016-9156 · GHSA-3v7r-r3pj-33fx

Improper input validation in Siemens SICAM PAS through V8.08

LOW 35

A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or delete files in certain parts of the file system by sending specially crafted packets to port 19235/T…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01513 Published 2016-12-05 No fix listed CWE-20

TI-2016-07038 CVE-2016-8566 · GHSA-8qgc-686g-hpj2

Credentials management flaw in Siemens SICAM PAS before 8.00

LOW 34

An issue was discovered in Siemens SICAM PAS before 8.00.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0032 Published 2017-02-13 No fix listed CWE-255

TI-2016-05073 CVE-2016-5848 · GHSA-hrhc-vfjq-7844

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database…

LOW 29

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00313 Published 2016-07-04 No fix listed CWE-200

TI-2023-20001 CVE-2023-38640 · GHSA-vvhw-v3wp-4m8r

Incorrect permission assignment in Siemens SICAM PAS/PQS

LOW 28

A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22).

CVSS 3.1MEDIUM 6.6 Local Low privileges No interaction EPSS 0.0016 Published 2023-10-10 Fixed in V8.22 CWE-732

TI-2016-05074 CVE-2016-5849 · GHSA-47qc-ch82-95fv

Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration…

LOW 13

Siemens SICAM PAS through 8.07 allows local users to obtain sensitive configuration information by leveraging database stoppage.

CVSS 3.1LOW 2.5 Local Low privileges No interaction EPSS 0.00317 Published 2016-07-04 No fix listed CWE-200

Open these records in search →