Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

71 records in Sinema Remote Connect Server · all components

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918

TI-2022-09008 CVE-2022-25315 · GHSA-8w4r-jhg8-8rvj

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

HIGH 82

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04821 Published 2022-02-18 Partial fix CWE-190

TI-2022-08947 CVE-2022-25236 · GHSA-3c6c-gjpg-qq92

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert…

HIGH 75

xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.35271 Published 2022-02-16 Partial fix CWE-668

TI-2020-06117 CVE-2020-7595 · GHSA-7553-jr98-vx47

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

HIGH 74

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07836 Published 2020-01-21 Partial fix · 1.10.8 CWE-835

TI-2021-20962 CVE-2021-45960 · GHSA-pfmv-2r4f-j9mj

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the…

HIGH 73

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04672 Published 2022-01-01 Partial fix CWE-682

TI-2021-21076 CVE-2021-46143 · GHSA-j6g2-cvhq-p8xr

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

HIGH 70

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04465 Published 2022-01-06 Partial fix CWE-190

TI-2021-13795 CVE-2021-34798 · GHSA-6cg7-x9gh-4wf6

NULL pointer dereference in httpd core

HIGH 69

Malformed requests may cause the server to dereference a NULL pointer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.64509 Published 2021-09-16 Partial fix CWE-476

TI-2021-03396 CVE-2021-20093 · GHSA-m5xx-rgqg-j2m6

Out-of-bounds read in Wibu-Systems CodeMeter

MEDIUM 64

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.33304 Published 2021-06-16 Fixed in 7.21a CWE-125

TI-2021-05786 CVE-2021-22925 · GHSA-rjqf-6h27-xqfp

Information disclosure in https://github.com/curl/curl

MEDIUM 63

curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05367 Published 2021-08-05 Partial fix CWE-200

TI-2022-11600 CVE-2022-29034 · GHSA-q48w-8cwv-r4h4

Cross-site scripting in Siemens SINEMA Remote Connect Server

MEDIUM 60

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.28732 Published 2022-06-14 Fixed in V3.1 CWE-79

TI-2022-08946 CVE-2022-25235 · GHSA-8mw4-grgw-m3fp

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding…

MEDIUM 57

xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04955 Published 2022-02-16 Partial fix CWE-116

TI-2022-07855 CVE-2022-23852 · GHSA-h83g-c7g2-6r9h

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for…

MEDIUM 57

Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05083 Published 2022-01-24 Partial fix CWE-190

TI-2022-07066 CVE-2022-22822 · GHSA-6rvw-hw83-3745

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 57

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0548 Published 2022-01-08 Partial fix CWE-190

TI-2022-07068 CVE-2022-22824 · GHSA-5pj8-9wmw-j96m

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 55

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03866 Published 2022-01-08 Partial fix CWE-190

TI-2022-07067 CVE-2022-22823 · GHSA-g654-6pp3-8m8w

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 55

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03866 Published 2022-01-08 Partial fix CWE-190

TI-2021-05785 CVE-2021-22924 · GHSA-qhhj-q26m-mrw8

Improper input validation in https://github.com/curl/curl

MEDIUM 51

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into ac…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0627 Published 2021-08-05 Partial fix CWE-20

TI-2022-13964 CVE-2022-32257 · GHSA-fjhw-c463-p66x

Improper access control in Siemens SINEMA Remote Connect Server

MEDIUM 50

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2024-03-12 Fixed in V3.2 CWE-284

TI-2022-13969 CVE-2022-32262 · GHSA-pxh7-rqm4-2h48

Command injection in Siemens SINEMA Remote Connect Server

MEDIUM 48

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02519 Published 2022-06-14 Fixed in V3.1 CWE-77

TI-2022-09007 CVE-2022-25314 · GHSA-3qc2-95g6-46cj

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

MEDIUM 47

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04818 Published 2022-02-18 Partial fix CWE-190

TI-2019-14394 CVE-2019-19956 · GHSA-5cvc-j2xm-h554

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

MEDIUM 47

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05626 Published 2019-12-24 Partial fix CWE-772

TI-2022-07953 CVE-2022-23990 · GHSA-r3g2-gw56-v728

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

MEDIUM 46

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04688 Published 2022-01-26 Partial fix CWE-190

TI-2022-07071 CVE-2022-22827 · GHSA-97f8-83vc-c97q

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 46

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03182 Published 2022-01-08 Partial fix CWE-190

TI-2022-07070 CVE-2022-22826 · GHSA-q5xc-gwgw-8j5q

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 46

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03182 Published 2022-01-08 Partial fix CWE-190

TI-2022-07069 CVE-2022-22825 · GHSA-2h26-9fpg-gcx8

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

MEDIUM 46

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02994 Published 2022-01-08 Partial fix CWE-190

TI-2022-13958 CVE-2022-32251 · GHSA-j2vp-3955-52wr

Missing authentication in Siemens SINEMA Remote Connect Server

MEDIUM 45

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01263 Published 2022-06-14 Fixed in V3.1 CWE-306

Open these records in search →

Critical	333
High	1406
Medium	690
Low	59
No CVSS	0