Read the docs

Siemens

Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9

Exploited now

Siemens records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability Priority CRITICAL 99KEV 2026-10-27TI-2026-78793 PHP Memory Corruption Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-78794 PHP Stale Internal Request-State Vulnerability Priority CRITICAL 99KEV 2026-10-26TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability Priority CRITICAL 96KEV 2026-10-20TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16

Components

Products in the NVD configurations · select one to filter the records
Teamcenter Visualization 188 records MEDIUM Jt2go 166 records MEDIUM Tecnomatix Plant Simulation 86 records MEDIUM Simcenter Femap 78 records MEDIUM Telecontrol Server Basic 77 records MEDIUM Sinema Remote Connect Server 71 records CRITICAL Sinec Infrastructure Network Services 68 records HIGH Scalance W1750d Firmware 62 records HIGH

Records

12 records in Totally Integrated Automation Portal · all components

TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787
TI-2025-21513 CVE-2025-30174 · GHSA-c22p-h6j4-33wp

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2023-24902 CVE-2023-46281 · GHSA-9qvw-gvq6-g569

A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

Priority MEDIUM 42

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-942
TI-2023-24906 CVE-2023-46285 · GHSA-84mm-xgw8-mv4q

Improper input validation in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-20
TI-2023-24905 CVE-2023-46284 · GHSA-f2hj-x395-x532

Buffer overflow in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2022-10316 CVE-2022-27194 · GHSA-96gp-ff96-gm4r

Uncontrolled resource consumption in Siemens SIMATIC PCS neo

Priority LOW 36

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01432 Published 2022-04-12 No fix listed CWE-400
TI-2020-15475 CVE-2020-25238 · GHSA-xj9q-pj74-p2j4

Improper access control in Siemens PCS neo

Priority LOW 36

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00899 Published 2021-02-09 Fixed in V3.1 CWE-284
TI-2023-24904 CVE-2023-46283 · GHSA-395m-pvc6-8rvm

Buffer overflow in Siemens Opcenter Execution Foundation

Priority LOW 35

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2019-08154 CVE-2019-10934 · GHSA-62j2-rqpv-q83g

Path traversal in Siemens TIA Portal V14

Priority LOW 34

A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (All versions < V17 Update 4).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00433 Published 2020-01-16 No fix listed CWE-22
TI-2023-24903 CVE-2023-46282 · GHSA-fmr5-j3hh-jpg4

Cross-site scripting in Siemens Opcenter Execution Foundation

Priority LOW 32

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00492 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-79
TI-2023-14571 CVE-2023-30757 · GHSA-h55g-jggq-rc4h

Protection mechanism failure in Siemens Totally Integrated Automation Portal V14

Priority LOW 26

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0012 Published 2023-06-13 No fix listed CWE-693
Open these records in search →