Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

8 records in Simatic S7 Cpu 1200 Firmware · all components

TI-2014-01790 CVE-2014-2258 · GHSA-wxf6-627x-8cpq

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers…

MEDIUM 42

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different vulnerability than CVE-2014-2259.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04731 Published 2014-03-22 No fix listed CWE-399

TI-2014-01786 CVE-2014-2254 · GHSA-p7qg-jqcw-xq38

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers…

MEDIUM 42

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets, a different vulnerability than CVE-2014-2255.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04731 Published 2014-03-22 No fix listed CWE-399

TI-2014-01782 CVE-2014-2250 · GHSA-5qj6-vw7x-6j4g

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware…

MEDIUM 42

The random-number generator on Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms a…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.03144 Published 2014-03-22 No fix listed CWE-310

TI-2014-01788 CVE-2014-2256 · GHSA-gch9-p5m3-r2vf

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers…

MEDIUM 40

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03678 Published 2014-03-22 No fix listed CWE-399

TI-2014-02338 CVE-2014-2908 · GHSA-9wch-7mq3-829x

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC…

LOW 39

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.20862 Published 2014-04-25 No fix listed CWE-79

TI-2016-02387 CVE-2016-2846 · GHSA-pmhf-pp7x-prjr

Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user…

LOW 32

Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01691 Published 2016-03-16 No fix listed CWE-254

TI-2014-02339 CVE-2014-2909 · GHSA-53rw-gv4m-q3jg

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU…

LOW 31

CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02417 Published 2014-04-25 No fix listed CWE-94

TI-2014-01784 CVE-2014-2252 · GHSA-5w44-54j8-r459

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers…

LOW 30

Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted PROFINET packets, a different vulnerability than CVE-2014-2253.

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.01242 Published 2014-03-22 No fix listed CWE-399

Open these records in search →

Critical	333
High	1406
Medium	690
Low	59
No CVSS	0