Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

24 records

Vendor: Siemens Component: Simatic Pcs Neo Clear all filters
TI-2025-27246 CVE-2025-40798 · GHSA-4prv-95gp-pq3p

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2025-27245 CVE-2025-40797 · GHSA-5c33-c25j-fpxq

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00536 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2025-27244 CVE-2025-40796 · GHSA-rhj7-r272-hv9p

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority LOW 38

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-125
TI-2025-27243 CVE-2025-40795 · GHSA-8mhf-qqpq-2vcr

Stack-based buffer overflow in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00715 Published 2025-09-09 Fixed in V6.0 SP1 Update 1, V2.15.1.3 CWE-121
TI-2025-27050 CVE-2025-40566 · GHSA-wmm5-59wm-x34p

Insufficient session expiration in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 40

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions < V4.1 Update 3), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1).

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00458 Published 2025-05-13 Fixed in V4.1 Update 3, V5.0 Update 1 CWE-613
TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787
TI-2023-24906 CVE-2023-46285 · GHSA-84mm-xgw8-mv4q

Improper input validation in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-20
TI-2023-24905 CVE-2023-46284 · GHSA-f2hj-x395-x532

Buffer overflow in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2023-24904 CVE-2023-46283 · GHSA-395m-pvc6-8rvm

Buffer overflow in Siemens Opcenter Execution Foundation

Priority LOW 35

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2023-24903 CVE-2023-46282 · GHSA-fmr5-j3hh-jpg4

Cross-site scripting in Siemens Opcenter Execution Foundation

Priority LOW 32

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00492 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-79
TI-2023-24902 CVE-2023-46281 · GHSA-9qvw-gvq6-g569

A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

Priority MEDIUM 42

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-942
TI-2023-24752 CVE-2023-46099 · GHSA-mhhf-5vm4-7jg8

Cross-site scripting in Siemens SIMATIC PCS neo

Priority LOW 25

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1MEDIUM 5.4 Adjacent network High privileges User interaction EPSS 0.00388 Published 2023-11-14 Fixed in V4.1 CWE-79
TI-2023-24750 CVE-2023-46097 · GHSA-cgvj-x976-6v45

SQL injection in Siemens SIMATIC PCS neo

Priority MEDIUM 43

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00432 Published 2023-11-14 Fixed in V4.1 CWE-89
TI-2023-24749 CVE-2023-46096 · GHSA-rx8q-grjm-x4p7

Missing authentication in Siemens SIMATIC PCS neo

Priority LOW 37

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00317 Published 2023-11-14 Fixed in V4.1 CWE-306
TI-2023-19934 CVE-2023-38558 · GHSA-mwjc-697v-r7m7

Exposure of resource to wrong sphere in Siemens SIMATIC PCS neo V4.0

Priority LOW 24

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2023-09-14 No fix listed CWE-538
TI-2022-10316 CVE-2022-27194 · GHSA-96gp-ff96-gm4r

Uncontrolled resource consumption in Siemens SIMATIC PCS neo

Priority LOW 36

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01432 Published 2022-04-12 No fix listed CWE-400
TI-2021-03396 CVE-2021-20093 · GHSA-m5xx-rgqg-j2m6

Out-of-bounds read in Wibu-Systems CodeMeter

Priority MEDIUM 64

A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.33304 Published 2021-06-16 Fixed in 7.21a CWE-125
TI-2020-06110 CVE-2020-7588 · GHSA-jgfm-rcjw-3pmx

Improper input validation in Siemens Opcenter Execution Discrete

Priority LOW 28

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02151 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-20
TI-2020-06109 CVE-2020-7587 · GHSA-pjx6-jj7c-74m7

Uncontrolled resource consumption in Siemens Opcenter Execution Discrete

Priority MEDIUM 40

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02484 Published 2020-07-14 Fixed in V3.2, V3.3 +3 CWE-400
TI-2020-06104 CVE-2020-7581 · GHSA-6pc5-ccr3-mpqp

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2)…

Priority LOW 30

A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00379 Published 2020-07-14 Fixed in V3.2, V3.3 +1 CWE-428
TI-2020-06103 CVE-2020-7580 · GHSA-gw48-mf2p-74mv

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2)…

Priority LOW 30

A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIMATIC NET PC Software…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0046 Published 2020-06-10 Fixed in V17, V21.8 +1 CWE-428