Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

16 records in Simatic S7-1200 Cpu 1211c Firmware · all components

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2021-15266 CVE-2021-37204 · GHSA-mw3j-f4pg-723r

A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…

Priority MEDIUM 43

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2022-02-09 Fixed in V2.9.2, V21.9 +3 CWE-672
TI-2021-15267 CVE-2021-37205 · GHSA-78f8-w6wx-97fh

Memory leak in Siemens SIMATIC Drive Controller family

Priority MEDIUM 42

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2022-02-09 Fixed in V2.3.6 CWE-401
TI-2021-17434 CVE-2021-40365 · GHSA-6x86-2ph3-crc4

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority MEDIUM 41

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00929 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-20
TI-2021-20216 CVE-2021-44695 · GHSA-7hvh-r5jg-mrp9

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1286
TI-2021-20215 CVE-2021-44694 · GHSA-vf8v-frr6-xcjc

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1287
Open these records in search →