Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

25 records

Vendor: Siemens Component: Nucleus Net Clear all filters
TI-2022-17998 CVE-2022-38371 · GHSA-59qg-qcpj-8hf9

Uncontrolled resource consumption in Siemens APOGEE MBC

Priority MEDIUM 47

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01598 Published 2022-10-11 Fixed in V3.5.7, V2.8.21 +5 CWE-400
TI-2021-11879 CVE-2021-31890 · GHSA-4mmq-7ch6-8958

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

Priority MEDIUM 44

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02221 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-240
TI-2021-11878 CVE-2021-31889 · GHSA-9f8q-4pw9-8433

Integer underflow in Siemens Capital Embedded AR Classic 431-422

Priority MEDIUM 43

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02175 Published 2021-11-09 Fixed in V2303, V0.5.0.0 CWE-191
TI-2021-11877 CVE-2021-31888 · GHSA-825j-f8cf-xxrr

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 43

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02449 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11876 CVE-2021-31887 · GHSA-q5r7-v53q-5pgx

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 43

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02449 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11875 CVE-2021-31886 · GHSA-p584-873g-v9x6

Out-of-bounds write in Siemens APOGEE MBC

Priority MEDIUM 48

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03075 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11874 CVE-2021-31885 · GHSA-fc2w-gxv3-9vh5

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE…

Priority LOW 35

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01237 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +2 CWE-805
TI-2021-11873 CVE-2021-31884 · GHSA-7p4v-ppf8-95r7

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE…

Priority MEDIUM 45

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APO…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2021-11-09 Fixed in V3.5.4, V2.8.19 +1 CWE-170
TI-2021-11872 CVE-2021-31883 · GHSA-9p2c-f575-r7xw

Memory corruption in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01526 Published 2021-11-09 Fixed in V2303 CWE-119
TI-2021-11871 CVE-2021-31882 · GHSA-w2w7-g4vg-h87m

Memory corruption in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01525 Published 2021-11-09 Fixed in V2303 CWE-119
TI-2021-11870 CVE-2021-31881 · GHSA-x327-px9p-wgr2

Out-of-bounds read in Siemens Capital Embedded AR Classic 431-422

Priority LOW 36

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01526 Published 2021-11-09 Fixed in V2303 CWE-125
TI-2021-11490 CVE-2021-31346 · GHSA-gwc7-j4mc-q8fw

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All…

Priority MEDIUM 43

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01965 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-1284
TI-2021-11488 CVE-2021-31344 · GHSA-47j6-w2j2-7jxf

Type confusion in Siemens Capital Embedded AR Classic 431-422

Priority LOW 33

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01456 Published 2021-11-09 Fixed in V2303, V0.5.0.0 +1 CWE-843
TI-2021-07809 CVE-2021-25677 · GHSA-596h-hvjh-ffpf

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…

Priority LOW 26

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01061 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +4 CWE-330
TI-2021-07796 CVE-2021-25664 · GHSA-q7wx-433j-27hv

Infinite loop in Siemens Capital Embedded AR Classic 431-422

Priority MEDIUM 41

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V201…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01885 Published 2021-04-22 Fixed in V2303, V2017.02.4 +1 CWE-835
TI-2021-07795 CVE-2021-25663 · GHSA-m3qf-xv59-6w6h

Infinite loop in Siemens Capital Embedded AR Classic 431-422

Priority MEDIUM 41

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V201…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01885 Published 2021-04-22 Fixed in V2303, V2017.02.4 +1 CWE-835
TI-2020-16823 CVE-2020-27738 · GHSA-pqww-3mgv-r6mj

Memory corruption in Siemens APOGEE PXC Compact

Priority LOW 39

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.03659 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +3 CWE-788
TI-2020-16822 CVE-2020-27737 · GHSA-j94w-w786-mv9m

Out-of-bounds read in Siemens APOGEE PXC Compact

Priority LOW 35

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03572 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +3 CWE-125
TI-2020-16821 CVE-2020-27736 · GHSA-6xw6-4hxh-3v2w

Out-of-bounds read in Siemens APOGEE PXC Compact

Priority LOW 35

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.03572 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +3 CWE-170
TI-2020-16432 CVE-2020-27009 · GHSA-wfpc-6x9w-jf83

Out-of-bounds write in Siemens APOGEE PXC Compact

Priority MEDIUM 45

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.07194 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +1 CWE-823
TI-2020-12430 CVE-2020-15795 · GHSA-cw98-4v34-2rc8

Out-of-bounds write in Siemens APOGEE PXC Compact

Priority MEDIUM 45

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.06366 Published 2021-04-22 Fixed in V3.5.5, V2.8.20 +1 CWE-787
TI-2020-17218 CVE-2020-28388 · GHSA-j6gp-g45q-2wm2

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions <…

Priority LOW 38

A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modul…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01367 Published 2021-02-09 Fixed in V3.5.5, V2.8.20 +2 CWE-342
TI-2019-10392 CVE-2019-13939 · GHSA-jpvr-c9fc-2r4h

Improper input validation in Siemens APOGEE MEC/MBC/PXC

Priority LOW 32

A vulnerability has been identified in APOGEE MEC/MBC/PXC (P2) (All versions < V2.8.2), APOGEE PXC Compact (BACnet) (All versions < V3.5.3), APOGEE PXC Compact (P2 Ethernet) (All versions >= V2.8.2 < V2.8.19), APOGEE PXC…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00715 Published 2020-01-16 Fixed in V2.8.2, V3.5.3 +5 CWE-20