Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

25 records in Simatic Pcs 7 · all components

TI-2014-07026 CVE-2014-8551 · GHSA-q6w4-ggqq-w3r4

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3…

Priority MEDIUM 51

The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05271 Published 2014-11-26 No fix listed CWE-94
TI-2019-08143 CVE-2019-10922 · GHSA-6j2f-925p-c58v

Missing authentication in Siemens SIMATIC PCS 7 V8.0 and earlier

Priority MEDIUM 47

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 and newer (All versions), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 and newer (All versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0264 Published 2019-05-14 No fix listed CWE-306
TI-2023-11164 CVE-2023-25910 · GHSA-5wm3-c83x-cqpq

Code injection in Siemens SIMATIC PCS 7

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7 SP1 HF1), SIMATIC S7-PM (All versions < V5.7 SP2 HF1), SIMATIC STEP 7 V5 (All versions < V5.7).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01 Published 2023-06-13 Fixed in V9.1 SP2 UC04, V5.7 SP1 HF1 +2 CWE-94
TI-2021-17429 CVE-2021-40358 · GHSA-rcjv-2hj5-3cmq

Path traversal in Siemens SIMATIC PCS 7 V8.2

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01274 Published 2021-11-09 No fix listed CWE-22
TI-2019-08139 CVE-2019-10918 · GHSA-vw33-cr89-4v6m

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions)…

Priority MEDIUM 42

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01926 Published 2019-05-14 No fix listed CWE-749
TI-2019-08137 CVE-2019-10916 · GHSA-xw7x-jg7g-86qj

SQL injection in Siemens SIMATIC PCS 7 V8.0 and earlier

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01541 Published 2019-05-14 No fix listed CWE-89
TI-2021-17431 CVE-2021-40360 · GHSA-8hg6-3x59-7xjr

Information disclosure in Siemens SIMATIC PCS 7 V8.2

Priority LOW 39

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7),…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00682 Published 2022-02-09 No fix listed CWE-200
TI-2023-13335 CVE-2023-28829 · GHSA-cgxq-vv5m-p85q

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions)…

Priority LOW 38

A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00291 Published 2023-06-13 Fixed in V8.0 CWE-477
TI-2018-03409 CVE-2018-4832 · GHSA-gx8w-56ch-h8w4

Improper input validation in Siemens OpenPCS 7 V7.1 and earlier

Priority LOW 37

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0242 Published 2018-04-24 No fix listed CWE-20
TI-2022-08168 CVE-2022-24287 · GHSA-8h6x-wrc8-g9xc

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7…

Priority LOW 36

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC06), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1 UC01), SIMATIC WinCC Runtime Professional V16 and e…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00238 Published 2022-05-10 No fix listed CWE-1188
TI-2019-13902 CVE-2019-19282 · GHSA-2pg9-8888-cqmc

A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All…

Priority LOW 36

A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd3), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions < V8.2 U…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01344 Published 2020-03-10 No fix listed CWE-131
TI-2020-06108 CVE-2020-7586 · GHSA-wggc-468x-3c9v

Heap-based buffer overflow in Siemens SIMATIC PCS 7 V8.2 and earlier

Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00423 Published 2020-06-10 Fixed in V9.2 CWE-122
TI-2020-06107 CVE-2020-7585 · GHSA-g9x4-j57r-q497

Uncontrolled search path in Siemens SIMATIC PCS 7 V8.2 and earlier

Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SI…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00452 Published 2020-06-10 Fixed in V9.2 CWE-427
TI-2019-08155 CVE-2019-10935 · GHSA-3hg6-vvm5-64f6

Unrestricted file upload in Siemens SIMATIC PCS 7 V8.0 and earlier

Priority LOW 34

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 1…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01274 Published 2019-07-11 No fix listed CWE-434
TI-2021-17432 CVE-2021-40363 · GHSA-wg4m-r562-77pw

Cleartext storage of sensitive information in Siemens SIMATIC PCS 7 V8.2

Priority LOW 33

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7),…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2022-02-09 No fix listed CWE-538
TI-2023-26225 CVE-2023-48364 · GHSA-m3wg-jr4x-9483

NULL pointer dereference in Siemens OpenPCS 7 V9.1

Priority LOW 31

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0027 Published 2024-02-13 Fixed in V9.1 SP2 UC05, V18 Update 4 +3 CWE-476
TI-2023-26224 CVE-2023-48363 · GHSA-q3m2-hxcv-vxp6

NULL pointer dereference in Siemens OpenPCS 7 V9.1

Priority LOW 31

A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC Route Control V9.1 (All…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0027 Published 2024-02-13 Fixed in V9.1 SP2 UC05, V18 Update 4 +3 CWE-476
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
TI-2016-06162 CVE-2016-7165 · GHSA-25rc-xhj7-mqxj

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2…

Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (Al…

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.00378 Published 2016-11-15 No fix listed CWE-254
TI-2020-08105 CVE-2020-10048 · GHSA-vmjg-j3qq-h4fv

Authentication bypass in Siemens SIMATIC PCS 7

Priority LOW 25

A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0034 Published 2021-02-09 No fix listed CWE-288
TI-2021-17433 CVE-2021-40364 · GHSA-h2gh-jqx7-wcj7

Sensitive information in log files in Siemens SIMATIC PCS 7 V8.2

Priority LOW 24

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0024 Published 2021-11-09 No fix listed CWE-532
TI-2019-08138 CVE-2019-10917 · GHSA-m4vw-c8vh-3c9g

Improper handling of exceptional conditions in Siemens SIMATIC PCS 7 V8.0 and earlier

Priority LOW 24

A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd11…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00265 Published 2019-05-14 No fix listed CWE-248
Open these records in search →