Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

24 records in Simatic Pcs Neo · all components

TI-2021-03396 CVE-2021-20093 · GHSA-m5xx-rgqg-j2m6

Out-of-bounds read in Wibu-Systems CodeMeter

Priority MEDIUM 64

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.33304 Published 2021-06-16 Fixed in 7.21a CWE-125
TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787
TI-2023-24750 CVE-2023-46097 · GHSA-cgvj-x976-6v45

SQL injection in Siemens SIMATIC PCS neo

Priority MEDIUM 43

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00432 Published 2023-11-14 Fixed in V4.1 CWE-89
TI-2023-24902 CVE-2023-46281 · GHSA-9qvw-gvq6-g569

A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

Priority MEDIUM 42

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-942
TI-2025-27243 CVE-2025-40795 · GHSA-8mhf-qqpq-2vcr

Stack-based buffer overflow in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00715 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-121
TI-2023-24906 CVE-2023-46285 · GHSA-84mm-xgw8-mv4q

Improper input validation in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-20
TI-2023-24905 CVE-2023-46284 · GHSA-f2hj-x395-x532

Buffer overflow in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2025-27050 CVE-2025-40566 · GHSA-wmm5-59wm-x34p

Insufficient session expiration in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 40

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1).

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00458 Published 2025-05-13 Fixed in V4.1 Update 3, V5.0 Update 1 CWE-613
TI-2020-06109 CVE-2020-7587 · GHSA-pjx6-jj7c-74m7

Uncontrolled resource consumption in Siemens Opcenter Execution Discrete

Priority MEDIUM 40

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02484 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-400
TI-2025-27246 CVE-2025-40798 · GHSA-4prv-95gp-pq3p

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2025-27245 CVE-2025-40797 · GHSA-5c33-c25j-fpxq

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2025-27244 CVE-2025-40796 · GHSA-rhj7-r272-hv9p

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2023-24749 CVE-2023-46096 · GHSA-rx8q-grjm-x4p7

Missing authentication in Siemens SIMATIC PCS neo

Priority LOW 37

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00317 Published 2023-11-14 Fixed in V4.1 CWE-306
TI-2022-10316 CVE-2022-27194 · GHSA-96gp-ff96-gm4r

Uncontrolled resource consumption in Siemens SIMATIC PCS neo

Priority LOW 36

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01432 Published 2022-04-12 No fix listed CWE-400
TI-2023-24904 CVE-2023-46283 · GHSA-395m-pvc6-8rvm

Buffer overflow in Siemens Opcenter Execution Foundation

Priority LOW 35

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2023-24903 CVE-2023-46282 · GHSA-fmr5-j3hh-jpg4

Cross-site scripting in Siemens Opcenter Execution Foundation

Priority LOW 32

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00492 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-79
TI-2020-06104 CVE-2020-7581 · GHSA-6pc5-ccr3-mpqp

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2)…

Priority LOW 30

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00379 Published 2020-07-14 Fixed in V3.2, V3.3 +1 CWE-428
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
TI-2020-06110 CVE-2020-7588 · GHSA-jgfm-rcjw-3pmx

Improper input validation in Siemens Opcenter Execution Discrete

Priority LOW 28

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02151 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-20
TI-2023-24752 CVE-2023-46099 · GHSA-mhhf-5vm4-7jg8

Cross-site scripting in Siemens SIMATIC PCS neo

Priority LOW 25

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1MEDIUM 5.4 Adjacent network High privileges User interaction EPSS 0.00388 Published 2023-11-14 Fixed in V4.1 CWE-79
TI-2023-19934 CVE-2023-38558 · GHSA-mwjc-697v-r7m7

Exposure of resource to wrong sphere in Siemens SIMATIC PCS neo V4.0

Priority LOW 24

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2023-09-14 No fix listed CWE-538
Open these records in search →