Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

14 records in Simatic S7-1500 Cpu Firmware · all components

TI-2022-09211 CVE-2022-25622 · GHSA-pgxc-2q22-7c2f

Uncontrolled resource consumption in Siemens SIMATIC CFU DIQ

Priority MEDIUM 41

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00901 Published 2022-04-12 Fixed in V2.0.0, V3.2.19 +15 CWE-400
TI-2014-01781 CVE-2014-2249 · GHSA-xgc5-jhvr-xfh8

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC…

Priority LOW 29

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the aut…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01344 Published 2014-03-16 No fix listed CWE-352
TI-2014-01778 CVE-2014-2246 · GHSA-whhc-p8jw-c4g3

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02168 Published 2014-03-16 No fix listed CWE-79
Open these records in search →