Siemens

Records2488All Threatist records

Exploited (KEV)37In CISA KEV

CVSS critical333CVSS 9.0–10.0

CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV

TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability CRITICAL 93KEV 2026-10-28 TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-78793 PHP Memory Corruption Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-78794 PHP Stale Internal Request-State Vulnerability CRITICAL 99KEV 2026-10-26 TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability CRITICAL 96KEV 2026-10-20 TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records

Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

77 records in Telecontrol Server Basic · all components

TI-2024-29679 CVE-2024-44102 · GHSA-57qc-q8rc-w8h7

Deserialization of untrusted data in Siemens PP TeleControl Server Basic 1000 to 5000 V3.1

MEDIUM 51

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 (6NH9910-0AA31-0AE1) (All versions < V3.1.2.1 with redundancy configured), PP TeleControl Server Basic 256 to 1000 V3.1 (6NH9910-0AA31-…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00996 Published 2024-11-12 Fixed in V3.1.2.1 CWE-502

TI-2025-20369 CVE-2025-27540 · GHSA-8p48-rwh9-r9c4

SQL injection in Siemens TeleControl Server Basic

MEDIUM 50

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01033 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-20368 CVE-2025-27539 · GHSA-hrx7-7gcr-7fmm

SQL injection in Siemens TeleControl Server Basic

MEDIUM 50

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01033 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-20330 CVE-2025-27495 · GHSA-g6r6-p92w-p2qw

SQL injection in Siemens TeleControl Server Basic

MEDIUM 50

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01033 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2019-04628 CVE-2019-6575 · GHSA-q8p5-c986-46jg

Improper handling of exceptional conditions in Siemens SIMATIC CP 443-1 OPC UA

MEDIUM 42

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01678 Published 2019-04-17 Fixed in V2.7, V5.1.3 +4 CWE-248

TI-2018-03413 CVE-2018-4836 · GHSA-25wc-vm27-vmmq

Improper authentication in Siemens TeleControl Server Basic

MEDIUM 42

A vulnerability has been identified in TeleControl Server Basic < V3.1.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01803 Published 2018-01-25 Fixed in V3.1 CWE-287

TI-2025-27227 CVE-2025-40765 · GHSA-qp9r-4cqh-77h3

Missing authentication in Siemens TeleControl Server Basic V3.1

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00534 Published 2025-10-14 Fixed in V3.1.2.3 CWE-306

TI-2025-23903 CVE-2025-32872 · GHSA-fqhh-gmfw-8v68

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23902 CVE-2025-32871 · GHSA-484q-pw9g-43jp

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23901 CVE-2025-32870 · GHSA-f79v-x23w-9hr4

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00757 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23898 CVE-2025-32867 · GHSA-g5cv-cw8w-2mp7

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23897 CVE-2025-32866 · GHSA-hj8j-5hmm-p35x

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23896 CVE-2025-32865 · GHSA-hc75-5r67-9j7v

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23895 CVE-2025-32864 · GHSA-83r7-48f6-rrw5

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23894 CVE-2025-32863 · GHSA-xpfx-g9x8-6hx6

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23893 CVE-2025-32862 · GHSA-v9jg-x75g-m949

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23892 CVE-2025-32861 · GHSA-8477-pj67-v6wm

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23891 CVE-2025-32860 · GHSA-8rv9-x4xj-49jq

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23890 CVE-2025-32859 · GHSA-v664-v4vw-9f75

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23889 CVE-2025-32858 · GHSA-x2qh-cxvc-xrj7

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23888 CVE-2025-32857 · GHSA-v32m-vc38-632r

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00709 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23887 CVE-2025-32856 · GHSA-6xwm-pqmf-hpfc

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23886 CVE-2025-32855 · GHSA-8wxq-8qgg-75mj

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00665 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23885 CVE-2025-32854 · GHSA-c52r-j8mc-82cv

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

TI-2025-23884 CVE-2025-32853 · GHSA-2r3c-qw88-pfgq

SQL injection in Siemens TeleControl Server Basic

MEDIUM 41

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00714 Published 2025-04-16 Fixed in V3.1.2.2 CWE-89

Open these records in search →

Critical	333
High	1406
Medium	690
Low	59
No CVSS	0