Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

12 records in Simatic Hmi Panels · all components

TI-2011-04195 CVE-2011-4875 · GHSA-v2qv-37fh-hjmr

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible…

MEDIUM 55

Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.13841 Published 2012-02-03 No fix listed CWE-119

TI-2011-04196 CVE-2011-4876 · GHSA-3ppq-p8g9-x6rg

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC…

MEDIUM 52

Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09046 Published 2012-02-03 No fix listed CWE-22

TI-2011-04199 CVE-2011-4879 · GHSA-m28h-wwg8-644c

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008…

MEDIUM 51

miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; Win…

CVSS 2.0HIGH 8.5 Network No auth Interaction — EPSS 0.12105 Published 2012-02-03 No fix listed CWE-20

TI-2011-03885 CVE-2011-4513 · GHSA-q4v4-44gg-hcfc

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP…

MEDIUM 50

Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assis…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04776 Published 2012-02-03 No fix listed

TI-2011-03886 CVE-2011-4514 · GHSA-vp7j-9chr-3qw6

The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka…

MEDIUM 49

The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Run…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03377 Published 2012-02-03 No fix listed CWE-287

TI-2011-04198 CVE-2011-4878 · GHSA-hcgx-xc4m-9h7x

Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC…

MEDIUM 47

Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.11092 Published 2012-02-03 No fix listed CWE-22

TI-2011-03881 CVE-2011-4509 · GHSA-xrjh-j238-j8p7

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka…

MEDIUM 47

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Ru…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01975 Published 2012-02-03 No fix listed CWE-264

TI-2011-03880 CVE-2011-4508 · GHSA-fmw2-jxvh-9jcr

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC…

MEDIUM 45

The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02979 Published 2012-02-03 No fix listed CWE-287

TI-2011-04197 CVE-2011-4877 · GHSA-8wq6-wppf-wxxh

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC…

MEDIUM 41

HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.07259 Published 2012-02-03 No fix listed CWE-20

TI-2011-03884 CVE-2011-4512 · GHSA-m278-843w-6753

CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005…

LOW 26

CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATI…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0161 Published 2012-02-03 No fix listed CWE-94

TI-2011-03883 CVE-2011-4511 · GHSA-3cf6-4qw9-m6mg

Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible…

LOW 23

Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile P…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0142 Published 2012-02-03 No fix listed CWE-79

TI-2011-03882 CVE-2011-4510 · GHSA-xg5m-r959-p6hh

Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible…

LOW 23

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0142 Published 2012-02-03 No fix listed CWE-79

Open these records in search →

Critical	333
High	1406
Medium	690
Low	59
No CVSS	0