Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

42 records in Sinec Nms · all components

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2021-16656 CVE-2021-39275 · GHSA-p59c-pqfv-4fwc

ap_escape_quotes buffer overflow

HIGH 69

ap_escape_quotes() may write beyond the end of a buffer when given malicious input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39402 Published 2021-09-16 Partial fix CWE-787

TI-2021-13795 CVE-2021-34798 · GHSA-6cg7-x9gh-4wf6

NULL pointer dereference in httpd core

HIGH 69

Malformed requests may cause the server to dereference a NULL pointer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.64509 Published 2021-09-16 Partial fix CWE-476

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476

TI-2021-13105 CVE-2021-33731 · GHSA-m7m9-9xpr-553c

SQL injection in Siemens SINEC NMS

MEDIUM 62

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.46587 Published 2021-10-12 No fix listed CWE-89

TI-2025-27206 CVE-2025-40738 · GHSA-fq7w-h2xr-rr5c

Path traversal in Siemens SINEC NMS

MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13438 Published 2025-07-08 Fixed in V4.0 CWE-22

TI-2025-27205 CVE-2025-40737 · GHSA-fg27-6v6q-r3w4

Path traversal in Siemens SINEC NMS

MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.13438 Published 2025-07-08 Fixed in V4.0 CWE-22

TI-2021-13108 CVE-2021-33734 · GHSA-gpg2-88cm-7643

SQL injection in Siemens SINEC NMS

MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27685 Published 2021-10-12 No fix listed CWE-89

TI-2021-13106 CVE-2021-33732 · GHSA-v7wh-pf74-7qcc

SQL injection in Siemens SINEC NMS

MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27685 Published 2021-10-12 No fix listed CWE-89

TI-2021-13104 CVE-2021-33730 · GHSA-hxgp-c294-9q8w

SQL injection in Siemens SINEC NMS

MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27685 Published 2021-10-12 No fix listed CWE-89

TI-2025-27204 CVE-2025-40736 · GHSA-5w39-m9v9-2j2j

Missing authentication in Siemens SINEC NMS

MEDIUM 48

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00456 Published 2025-07-08 Fixed in V4.0 CWE-306

TI-2021-13107 CVE-2021-33733 · GHSA-42vc-wcrf-99q3

SQL injection in Siemens SINEC NMS

MEDIUM 48

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.15385 Published 2021-10-12 No fix listed CWE-89

TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125

TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

MEDIUM 45

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787

TI-2025-21513 CVE-2025-30174 · GHSA-c22p-h6j4-33wp

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

MEDIUM 45

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125

TI-2024-15804 CVE-2024-23810 · GHSA-qf5j-fwc8-wj57

SQL injection in Siemens SINEC NMS

MEDIUM 44

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00654 Published 2024-02-13 Fixed in V2.0 SP1 CWE-89

TI-2024-27962 CVE-2024-41940 · GHSA-m3qr-mjwp-7555

Improper input validation in Siemens SINEC NMS

MEDIUM 43

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00554 Published 2024-08-13 Fixed in V3.0 CWE-20

TI-2021-13103 CVE-2021-33729 · GHSA-43ff-jh97-jcx5

SQL injection in Siemens SINEC NMS

MEDIUM 43

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02381 Published 2021-10-12 No fix listed CWE-89

TI-2024-15806 CVE-2024-23812 · GHSA-mpc7-49rp-mqqc

OS command injection in Siemens SINEC NMS

MEDIUM 42

A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01094 Published 2024-02-13 Fixed in V2.0 SP1 CWE-78

TI-2021-13099 CVE-2021-33725 · GHSA-pq7q-x76h-79v7

Path traversal in Siemens SINEC NMS

MEDIUM 41

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01033 Published 2021-10-12 No fix listed CWE-22

TI-2021-13098 CVE-2021-33724 · GHSA-jcg2-3p6x-f868

Path traversal in Siemens SINEC NMS

MEDIUM 41

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01033 Published 2021-10-12 No fix listed CWE-22

TI-2025-27218 CVE-2025-40755 · GHSA-hmqp-377p-gpj8

SQL injection in Siemens SINEC NMS

MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0038 Published 2025-10-14 Fixed in V4.0 SP1 CWE-89

TI-2025-27203 CVE-2025-40735 · GHSA-3g42-9rvj-6j9x

SQL injection in Siemens SINEC NMS

MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V4.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00534 Published 2025-07-08 Fixed in V4.0 CWE-89

TI-2024-27961 CVE-2024-41939 · GHSA-8g9j-h3c4-q352

Incorrect authorization in Siemens SINEC NMS

MEDIUM 40

A vulnerability has been identified in SINEC NMS (All versions < V3.0).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0051 Published 2024-08-13 Fixed in V3.0 CWE-863

Open these records in search →