Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

8 records in Siplus Tim 1531 Irc Firmware · all components

TI-2022-21502 CVE-2022-43768 · GHSA-wxpj-f564-69x8

Resource allocation without limits in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-770
TI-2022-21471 CVE-2022-43716 · GHSA-m73h-5f8p-xrgj

Use after free in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-416
TI-2021-17434 CVE-2021-40365 · GHSA-6x86-2ph3-crc4

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority MEDIUM 41

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00929 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-20
TI-2021-20216 CVE-2021-44695 · GHSA-7hvh-r5jg-mrp9

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1286
TI-2021-20215 CVE-2021-44694 · GHSA-vf8v-frr6-xcjc

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1287
TI-2022-19088 CVE-2022-40225 · GHSA-7xr5-w5mj-r2jm

Incorrect numeric conversion in Siemens SIPLUS TIM 1531 IRC

Priority LOW 31

A vulnerability has been identified in SIPLUS TIM 1531 IRC (6AG1543-1MX00-7XE0) (All versions < V2.4.8), TIM 1531 IRC (6GK7543-1MX00-0XE0) (All versions < V2.4.8).

CVSS 4.0MEDIUM 6.9 Network Low privileges User interaction EPSS 0.00622 Published 2024-06-11 Fixed in V2.4.8 CWE-681
Open these records in search →