Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

17 records in Sinema Server · all components

TI-2021-17490 CVE-2021-40438 · GHSA-rwxq-58vm-3v2j

mod_proxy SSRF

Priority CRITICAL 98KEV

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.99999 Published 2021-09-16 Fixed CWE-918
TI-2021-16656 CVE-2021-39275 · GHSA-p59c-pqfv-4fwc

ap_escape_quotes buffer overflow

Priority HIGH 69

ap_escape_quotes() may write beyond the end of a buffer when given malicious input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39402 Published 2021-09-16 Partial fix CWE-787
TI-2021-13795 CVE-2021-34798 · GHSA-6cg7-x9gh-4wf6

NULL pointer dereference in httpd core

Priority HIGH 69

Malformed requests may cause the server to dereference a NULL pointer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.64509 Published 2021-09-16 Partial fix CWE-476
TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2020-15474 CVE-2020-25237 · GHSA-3xq9-pprq-hm99

Path traversal in Siemens SINEC NMS

Priority MEDIUM 54

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.20616 Published 2021-02-09 No fix listed CWE-22
TI-2019-08160 CVE-2019-10940 · GHSA-8vxr-h2m2-wf68

Improper privilege management in Siemens SINEMA Server

Priority MEDIUM 45

A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01208 Published 2020-01-16 No fix listed CWE-266
TI-2023-17884 CVE-2023-35796 · GHSA-8w38-353q-pxjf

Cross-site scripting in Siemens SINEMA Server V14

Priority MEDIUM 42

A vulnerability has been identified in SINEMA Server V14 (All versions).

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00639 Published 2023-10-10 No fix listed CWE-79
TI-2022-09004 CVE-2022-25311 · GHSA-35fm-4q2r-j938

Improper privilege management in Siemens SINEC NMS

Priority MEDIUM 41

A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00537 Published 2022-03-08 Fixed in V1.0.3 CWE-269
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428
TI-2017-04602 CVE-2017-6865 · GHSA-8jhv-ch7h-fqpj

Improper input validation in Siemens Primary Setup Tool

Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SIMATIC NET PC-Software (All versions < V14 SP1), SIMATIC PCS 7 V8.1 (All versions…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00469 Published 2017-05-11 Fixed in V3.0, V5.6 +3 CWE-20
TI-2016-06162 CVE-2016-7165 · GHSA-25rc-xhj7-mqxj

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2…

Priority LOW 29

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2), SIMATIC NET PC-Software (All versions < V14), SIMATIC PCS 7 V7.1 (Al…

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.00378 Published 2016-11-15 No fix listed CWE-254
TI-2019-08161 CVE-2019-10941 · GHSA-69h3-7gjf-m5gx

Missing authentication in Siemens SINEMA Server

Priority LOW 26

A vulnerability has been identified in SINEMA Server (All versions < V14 SP3).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00831 Published 2021-09-14 No fix listed CWE-306
Open these records in search →