Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

16 records in Tim 1531 Irc Firmware · all components

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2018-03418 CVE-2018-4841 · GHSA-vj79-837c-gmf4

Improper authentication in Siemens TIM 1531 IRC

Priority MEDIUM 50

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04726 Published 2018-03-29 Fixed in V1.1 CWE-303
TI-2018-10027 CVE-2018-13816 · GHSA-vx39-fw57-q8mc

Improper access control in Siemens TIM 1531 IRC

Priority MEDIUM 48

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02796 Published 2018-12-12 No fix listed CWE-284
TI-2021-15266 CVE-2021-37204 · GHSA-mw3j-f4pg-723r

A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…

Priority MEDIUM 43

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2022-02-09 Fixed in V2.9.2, V21.9 +3 CWE-672
TI-2021-15267 CVE-2021-37205 · GHSA-78f8-w6wx-97fh

Memory leak in Siemens SIMATIC Drive Controller family

Priority MEDIUM 42

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2022-02-09 Fixed in V2.3.6 CWE-401
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx

Out-of-bounds read in Siemens SIMATIC CP 1604

Priority MEDIUM 42

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01401 Published 2019-04-17 Fixed in V3.3, V3.2.16 +13 CWE-125
TI-2022-21502 CVE-2022-43768 · GHSA-wxpj-f564-69x8

Resource allocation without limits in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-770
TI-2022-21471 CVE-2022-43716 · GHSA-m73h-5f8p-xrgj

Use after free in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-416
TI-2021-17434 CVE-2021-40365 · GHSA-6x86-2ph3-crc4

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority MEDIUM 41

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00929 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-20
TI-2021-20216 CVE-2021-44695 · GHSA-7hvh-r5jg-mrp9

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1286
TI-2021-20215 CVE-2021-44694 · GHSA-vf8v-frr6-xcjc

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1287
TI-2020-17226 CVE-2020-28397 · GHSA-wg3f-fv3w-mw54

Incorrect authorization in Siemens SIMATIC Drive Controller family

Priority LOW 25

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00752 Published 2021-08-10 Fixed in V2.9.2, V21.9 CWE-863
Open these records in search →