Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

11 records in Simatic Cp 1543-1 Firmware · all components

TI-2022-15626 CVE-2022-34819 · GHSA-x7cp-9x6c-2mm8

Heap-based buffer overflow in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 53

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02083 Published 2022-07-12 Fixed in V3.3.46, V3.0.22 CWE-122
TI-2021-05785 CVE-2021-22924 · GHSA-qhhj-q26m-mrw8

Improper input validation in https://github.com/curl/curl

Priority MEDIUM 51

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into ac…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0627 Published 2021-08-05 Partial fix CWE-20
TI-2022-15627 CVE-2022-34820 · GHSA-6j7x-87cm-p532

Command injection in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 47

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02217 Published 2022-07-12 Fixed in V3.3.46, V3.0.22 CWE-77
TI-2022-15628 CVE-2022-34821 · GHSA-xx9f-xg2j-c647

Code injection in Siemens RUGGEDCOM RM1224 LTE EU

Priority MEDIUM 45

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00…

CVSS 4.0HIGH 8.8 Adjacent network High privileges No interaction EPSS 0.02427 Published 2022-07-12 Fixed in V7.2, V2.3 +5 CWE-94
TI-2024-33749 CVE-2024-50310 · GHSA-84fj-mc2g-vcqc

Incorrect authorization in Siemens SIMATIC CP 1543-1 V4.0

Priority MEDIUM 44

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00481 Published 2024-11-12 Fixed in V4.0.50 CWE-863
Open these records in search →