siemens

2,365 tracked vulnerabilities.

CVE-2024-52504 HIGH
SIPROTEC 4 - Unauthenticated Denial of Service via File Transfer Interruption
Aug 12, 2025
CVSS 7.5
EPSS 0.00
CVE-2024-41986 MEDIUM
Siemens Opcenter Quality SmartClient Modules - Use of Broken Cryptographic Algorithm via TLS 1.0 and 1.1
Aug 12, 2025
CVSS 6.4
EPSS 0.00
CVE-2024-41985 LOW
Siemens Opcenter Quality SmartClient Modules - Insufficient Session Expiration
Aug 12, 2025
CVSS 2.6
EPSS 0.00
CVE-2024-41984 LOW
Siemens Opcenter Quality SmartClient Modules - Information Disclosure via Error Message
Aug 12, 2025
CVSS 2.6
EPSS 0.00
CVE-2024-41983 LOW
Siemens Opcenter Quality SmartClient - SQL Error Message Information Disclosure
Aug 12, 2025
CVSS 3.5
EPSS 0.00
CVE-2024-41982 MEDIUM
Siemens Opcenter Quality SmartClient Modules - Missing Encryption of Sensitive Data
Aug 12, 2025
CVSS 4.8
EPSS 0.00
CVE-2024-41980 LOW
Siemens Opcenter Quality SmartClient Modules >= V13.2 < V2506 - Unencrypted LDAP Communication
Aug 12, 2025
CVSS 3.1
EPSS 0.00
CVE-2024-41979 HIGH
Siemens Opcenter Quality - Incorrect Authorization
Aug 12, 2025
CVSS 7.1
EPSS 0.00
CVE-2024-31854 HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
Jul 08, 2025
CVSS 8.1
EPSS 0.00
CVE-2024-31853 HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
Jul 08, 2025
CVSS 8.1
EPSS 0.00
CVE-2024-41797 MEDIUM
RUGGEDCOM RST2428P,SCALANCE XC316-8,SCALANCE XC324-4,SCALANCE XC324...
Jun 10, 2025
CVSS 4.3
EPSS 0.00
CVE-2024-51447 MEDIUM
Polarion ALM V2310 and V2404 < V2404.2 - Unauthenticated Observable Response Discrepancy in Username Validation
May 13, 2025
CVSS 5.3
EPSS 0.00
CVE-2024-51446 MEDIUM
Polarion ALM V2310 and V2404 < V2404.4 - Authenticated Stored Cross-Site Scripting via XML File Upload
May 13, 2025
CVSS 6.5
EPSS 0.00
CVE-2024-51445 MEDIUM
Polarion ALM V2310 and V2404 < V2404.4 - Authenticated XML External Entity Injection in Docx Import Feature
May 13, 2025
CVSS 6.5
EPSS 0.00
CVE-2024-51444 MEDIUM
Polarion ALM V2310 and V2404 < V2404.4 - Authenticated SQL Injection
May 13, 2025
CVSS 6.5
EPSS 0.00
CVE-2024-23815 HIGH
Siemens Desigo CC - Unauthenticated SQL Query Execution via Event Port
May 13, 2025
CVSS 7.5
EPSS 0.00
CVE-2024-54092 CRITICAL
Industrial Edge Device Kit - arm64/x86-64 <1.20.2-1/<1.21.1-1 - Inf...
Apr 08, 2025
CVSS 9.8
EPSS 0.01
CVE-2024-41796 MEDIUM
SENTRON 7KT PAC1260 Data Manager - Unauthenticated Password Change via Web Interface
Apr 08, 2025
CVSS 6.5
EPSS 0.00
CVE-2024-41795 MEDIUM
SENTRON 7KT PAC1260 Data Manager - Cross-Site Request Forgery
Apr 08, 2025
CVSS 6.5
EPSS 0.00
CVE-2024-41794 CRITICAL
SENTRON 7KT PAC1260 Data Manager - Use of Hard-coded Credentials
Apr 08, 2025
CVSS 10.0
EPSS 0.01
CVE-2024-41793 HIGH
SENTRON 7KT PAC1260 Data Manager - Unauthenticated SSH Service Enablement via Web Interface
Apr 08, 2025
CVSS 8.6
EPSS 0.01
CVE-2024-41792 HIGH
SENTRON 7KT PAC1260 Data Manager - Unauthenticated Path Traversal via Web Interface
Apr 08, 2025
CVSS 8.6
EPSS 0.01
CVE-2024-41791 HIGH
SENTRON 7KT PAC1260 Data Manager - Unauthenticated Critical Function Access via Web Interface
Apr 08, 2025
CVSS 7.3
EPSS 0.00
CVE-2024-41790 CRITICAL
SENTRON 7KT PAC1260 Data Manager - Authenticated Remote Code Execution via Region Parameter
Apr 08, 2025
CVSS 9.1
EPSS 0.01
CVE-2024-41789 CRITICAL
SENTRON 7KT PAC1260 Data Manager - Authenticated Remote Code Execution via Language Parameter
Apr 08, 2025
CVSS 9.1
EPSS 0.01
Products
teamcenter_visualization 188 jt2go 166 tecnomatix_plant_simulation 86 simcenter_femap 78 telecontrol_server_basic 77 sinema_remote_connect_server 71 sinec_infrastructure_network_services 68 scalance_w1750d_firmware 62 parasolid 52 solid_edge 47 wincc 43 sinec_ins 42 sinec_nms 42 solid_edge_se2023 36 sppa-t3000_ms3000_migration_server 35 jt_utilities 32 comos 31 simatic_wincc 30 jt_open_toolkit 29 scalance_lpe9403_firmware 27 ruggedcom_rox_mx5000_firmware 26 ruggedcom_rox_rx1400_firmware 26 ruggedcom_rox_rx1500_firmware 26 ruggedcom_rox_rx1501_firmware 26 ruggedcom_rox_rx1510_firmware 26 ruggedcom_rox_rx1511_firmware 26 ruggedcom_rox_rx1512_firmware 26 ruggedcom_rox_rx5000_firmware 26 nucleus_net 25 nucleus_source_code 25
Quick Filters
Critical CVEs With Exploits In CISA KEV