Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

8 records in Simatic Wincc Open Architecture · all components

TI-2018-02959 CVE-2018-3991 · GHSA-wqfw-3h2h-7vwc

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of…

HIGH 68

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.34329 Published 2019-02-05 No fix listed CWE-787

TI-2018-10011 CVE-2018-13799 · GHSA-93r3-p736-cjhx

Improper privilege management in Siemens SIMATIC WinCC OA V3.14 and prior

MEDIUM 44

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021).

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02252 Published 2018-09-12 No fix listed CWE-269

TI-2014-01310 CVE-2014-1697 · GHSA-pjpr-3jp2-8fm3

The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows…

MEDIUM 41

The integrated web server in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to execute arbitrary code via crafted packets to TCP port 4999.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05261 Published 2014-02-07 No fix listed

TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428

TI-2014-01311 CVE-2014-1698 · GHSA-5x5r-8mwc-gh65

Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January…

LOW 29

Directory traversal vulnerability in Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to read arbitrary files via crafted packets to TCP port 4999.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03507 Published 2014-02-07 No fix listed CWE-22

TI-2019-08150 CVE-2019-10929 · GHSA-77j2-3682-mqmj

Broken or risky cryptographic algorithm in Siemens SIMATIC CP 1626

LOW 28

A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00978 Published 2019-08-13 Fixed in V20.8, V4.4.0 +4 CWE-327

TI-2014-01312 CVE-2014-1699 · GHSA-5h6v-x3m8-7h55

Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a…

LOW 27

Siemens SIMATIC WinCC OA before 3.12 P002 January allows remote attackers to cause a denial of service (monitoring-service outage) via malformed HTTP requests to port 4999.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02142 Published 2014-02-07 No fix listed CWE-399

TI-2014-01309 CVE-2014-1696 · GHSA-p2vr-w26x-2355

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for…

LOW 26

Siemens SIMATIC WinCC OA before 3.12 P002 January uses a weak hash algorithm for passwords, which makes it easier for remote attackers to obtain access via a brute-force attack.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01691 Published 2014-02-07 No fix listed CWE-310

Open these records in search →