Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

20 records in Simatic Cn 4100 Firmware · all components

TI-2025-26358 CVE-2025-39682 · GHSA-v2pf-75pf-9c5h

tls: fix handling of zero-length records on the rx_list

Priority CRITICAL 100KEV

In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - on…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03198 Published 2025-09-05 Fixed in 6.1.149, 6.6.103 +3 CWE-754
TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669
TI-2024-21619 CVE-2024-32740 · GHSA-9j9j-j88x-9vc6

Hard-coded credentials in Siemens SIMATIC CN 4100

Priority MEDIUM 49

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2024-05-14 Fixed in V3.0 CWE-798
TI-2026-18409 CVE-2026-22924 · GHSA-9p8h-826j-wp3r

Missing authentication in Siemens SIMATIC CN 4100

Priority MEDIUM 44

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.003 Published 2026-05-12 Fixed in V5.0 CWE-306
TI-2023-13569 CVE-2023-29130 · GHSA-hqc9-64cv-8vvf

Improper access control in Siemens SIMATIC CN 4100

Priority MEDIUM 44

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00564 Published 2023-07-11 Fixed in V2.5 CWE-284
TI-2025-27329 CVE-2025-40938 · GHSA-6wrx-4m6w-9vw2

Hard-coded credentials in Siemens SIMATIC CN 4100

Priority MEDIUM 42

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00377 Published 2025-12-09 Fixed in V4.0.1 CWE-798
TI-2023-26893 CVE-2023-49251 · GHSA-c4wm-h8mm-vr45

Authorization bypass in Siemens SIMATIC CN 4100

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00528 Published 2024-01-09 Fixed in V2.7 CWE-639
TI-2025-27328 CVE-2025-40937 · GHSA-f729-p9c9-fm58

Command injection in Siemens SIMATIC CN 4100

Priority MEDIUM 40

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00586 Published 2025-12-09 Fixed in V4.0.1 CWE-77
TI-2026-02285 CVE-2026-2673 · GHSA-wj64-gh9j-xm82

OpenSSL TLS 1.3 server may choose unexpected key agreement group

Priority LOW 35

Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00453 Published 2026-03-13 Partial fix · 3.6.2, 3.5.6 CWE-757
TI-2025-25840 CVE-2025-38502 · GHSA-x96j-4m6x-jcvx

bpf: Fix oob access in cgroup local storage

Priority LOW 35

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00187 Published 2025-08-16 Partial fix · 5.15.192, 6.1.151 +4 CWE-125
TI-2025-27331 CVE-2025-40940 · GHSA-2cx9-pwfc-xwx3

Information disclosure in Siemens SIMATIC CN 4100

Priority LOW 31

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00366 Published 2025-12-09 Fixed in V4.0.1 CWE-200
TI-2025-27332 CVE-2025-40941 · GHSA-4cw5-4fh5-2c5q

Information disclosure in Siemens SIMATIC CN 4100

Priority LOW 24

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2025-12-09 Fixed in V4.0.1 CWE-200
TI-2025-27330 CVE-2025-40939 · GHSA-35wm-hq5r-2p36

Improper access control in Siemens SIMATIC CN 4100

Priority LOW 23

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1).

CVSS 4.0MEDIUM 5.1 Physical No auth No interaction EPSS 0.00213 Published 2025-12-09 Fixed in V4.0.1 CWE-284
Open these records in search →