Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: Siemens Component: Totally Integrated Automation Portal Clear all filters
TI-2025-21515 CVE-2025-30176 · GHSA-rq2h-x4xh-35w4

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2025-21514 CVE-2025-30175 · GHSA-p7rr-mpvr-c5pf

Out-of-bounds write in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-787
TI-2025-21513 CVE-2025-30174 · GHSA-c22p-h6j4-33wp

Out-of-bounds read in Siemens SIMATIC PCS neo V4.1

Priority MEDIUM 45

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SINEC NMS (All versions < V4.0), SINEMA Remote Connect (All versions), Totally Integrated Automation Portal…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0065 Published 2025-05-13 Fixed in V4.0, V2.15.1.1 CWE-125
TI-2023-24906 CVE-2023-46285 · GHSA-84mm-xgw8-mv4q

Improper input validation in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-20
TI-2023-24905 CVE-2023-46284 · GHSA-f2hj-x395-x532

Buffer overflow in Siemens Opcenter Execution Foundation

Priority MEDIUM 41

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2023-24904 CVE-2023-46283 · GHSA-395m-pvc6-8rvm

Buffer overflow in Siemens Opcenter Execution Foundation

Priority LOW 35

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00905 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-120
TI-2023-24903 CVE-2023-46282 · GHSA-fmr5-j3hh-jpg4

Cross-site scripting in Siemens Opcenter Execution Foundation

Priority LOW 32

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00492 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-79
TI-2023-24902 CVE-2023-46281 · GHSA-9qvw-gvq6-g569

A vulnerability has been identified in Opcenter Execution Foundation (All versions <…

Priority MEDIUM 42

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally In…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2023-12-12 Fixed in V2407, V2312 +4 CWE-942
TI-2023-14571 CVE-2023-30757 · GHSA-h55g-jggq-rc4h

Protection mechanism failure in Siemens Totally Integrated Automation Portal V14

Priority LOW 26

A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V14 (All versions), Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA…

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0012 Published 2023-06-13 No fix listed CWE-693
TI-2022-10316 CVE-2022-27194 · GHSA-96gp-ff96-gm4r

Uncontrolled resource consumption in Siemens SIMATIC PCS neo

Priority LOW 36

A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA Portal (V15, V15.1, V16 and V17).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01432 Published 2022-04-12 No fix listed CWE-400
TI-2020-15475 CVE-2020-25238 · GHSA-xj9q-pj74-p2j4

Improper access control in Siemens PCS neo

Priority LOW 36

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00899 Published 2021-02-09 Fixed in V3.1 CWE-284
TI-2019-08154 CVE-2019-10934 · GHSA-62j2-rqpv-q83g

Path traversal in Siemens TIA Portal V14

Priority LOW 34

A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Update 7), TIA Portal V16 (All versions < V16 Update 6), TIA Portal V17 (All versions < V17 Update 4).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00433 Published 2020-01-16 No fix listed CWE-22