Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

13 records in Simatic S7-1500 Firmware · all components

TI-2018-02664 CVE-2018-3639

Observable discrepancy in Intel Multiple

Priority MEDIUM 59

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.60421 Published 2018-05-22 Partial fix CWE-203
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx

Out-of-bounds read in Siemens SIMATIC CP 1604

Priority MEDIUM 42

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01401 Published 2019-04-17 Fixed in V3.3, V3.2.16 +13 CWE-125
TI-2018-11879 CVE-2018-16559 · GHSA-f6v4-p9wf-p829

Improper input validation in Siemens SIMATIC S7-1500 CPU

Priority LOW 37

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2019-04-17 No fix listed CWE-20
TI-2018-11878 CVE-2018-16558 · GHSA-fc72-f69r-qvh3

Improper input validation in Siemens SIMATIC S7-1500 CPU

Priority LOW 37

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2019-04-17 No fix listed CWE-20
TI-2018-10016 CVE-2018-13805 · GHSA-mxvx-9h7h-6vxh

Uncontrolled resource consumption in Siemens SIMATIC ET 200SP Open Controller

Priority LOW 36

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 incl.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01578 Published 2018-10-10 No fix listed CWE-400
TI-2020-07009 CVE-2020-8744 · GHSA-4pp9-pcmj-qjgw

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40…

Priority LOW 34

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileg…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00362 Published 2020-11-12 No fix listed CWE-665
TI-2018-03420 CVE-2018-4843 · GHSA-2cg6-w8mm-22rg

Improper input validation in Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7

Priority LOW 30

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIM…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00543 Published 2018-03-20 Fixed in V7.0.3, V3.3 +6 CWE-20
Open these records in search →