siemens

2,341 tracked vulnerabilities.

CVE-2024-47942 HIGH
Solid Edge SE2024 < 224.00.09.04 - DLL Hijacking via Crafted DLL File
Nov 12, 2024
CVSS 7.3
EPSS 0.00
CVE-2024-47941 HIGH
Solid Edge SE2024 < 224.00.09.04 - Out-of-Bounds Read in PAR File Parser
Nov 12, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-47940 HIGH
Solid Edge SE2024 < 224.00.09.04 - Out-of-Bounds Read in PSM File Parser
Nov 12, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-47808 HIGH
SINEC NMS < V3.0 SP1 - Privilege Escalation
Nov 12, 2024
CVSS 8.4
EPSS 0.00
CVE-2024-47783 HIGH
SIPORT <V3.4.0 - Privilege Escalation
Nov 12, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-46894 MEDIUM
SINEC INS < V1.0 SP2 Update 3 - Authenticated Information Disclosure and Configuration Modification via SFTP Users API
Nov 12, 2024
CVSS 6.3
EPSS 0.00
CVE-2024-46892 MEDIUM
SINEC INS < V1.0 SP2 Update 3 - Insufficient Session Expiration
Nov 12, 2024
CVSS 4.9
EPSS 0.00
CVE-2024-46891 MEDIUM
SINEC INS < V1.0 SP2 Update 3 - Unauthenticated Denial of Service via Log File Exhaustion
Nov 12, 2024
CVSS 5.3
EPSS 0.01
CVE-2024-46890 CRITICAL
SINEC INS < V1.0 SP2 Update 3 - Authenticated Remote Code Execution via Web API Endpoint
Nov 12, 2024
CVSS 9.1
EPSS 0.02
CVE-2024-46889 MEDIUM
SINEC INS <V1.0 SP2 Update 3 - Info Disclosure
Nov 12, 2024
CVSS 5.3
EPSS 0.00
CVE-2024-46888 CRITICAL
SINEC INS < V1.0 SP2 Update 3 - Authenticated Path Traversal and Arbitrary File Write via SFTP File Operations
Nov 12, 2024
CVSS 9.9
EPSS 0.09
CVE-2024-44102 CRITICAL
Siemens TeleControl Server Basic < 3.1.2.1 - Unauthenticated Remote Code Execution via Insecure Deserialization
Nov 12, 2024
CVSS 10.0
EPSS 0.09
CVE-2024-36140 MEDIUM
OZW672 and OZW772 Firmware < 5.2 - Authenticated Stored Cross-Site Scripting in User Accounts Tab
Nov 12, 2024
CVSS 6.8
EPSS 0.00
CVE-2024-29119 HIGH
Spectrum Power 7 < V24Q3 - Authenticated Privilege Escalation via SUID Binaries
Nov 12, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-47904 HIGH
InterMesh 7177 Hybrid 2.0 < 8.2.12 & 7707 Fire < 7.2.12 - Privilege Escalation via SUID Binary
Oct 23, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-47903 MEDIUM
InterMesh Hybrid/ Fire <8.2.12/<7.2.12 - File Write
Oct 23, 2024
CVSS 5.8
EPSS 0.00
CVE-2024-47902 HIGH
InterMesh 7177 Hybrid 2.0 < 8.2.12 & 7707 Fire < 7.2.12 - Unauthenticated OS Command Execution
Oct 23, 2024
CVSS 7.2
EPSS 0.00
CVE-2024-47901 CRITICAL
Siemens InterMesh 7177 Hybrid 2.0 < 8.2.12 & 7707 Fire < 7.2.12 - RCE via Web Server GET Request
Oct 23, 2024
CVSS 10.0
EPSS 0.03
CVE-2024-47565 MEDIUM
Siemens SINEC Security Monitor <V4.9.0 - Info Disclosure
Oct 08, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-47563 MEDIUM
Siemens SINEC Security Monitor < V4.9.0 - Path Traversal
Oct 08, 2024
CVSS 5.3
EPSS 0.00
CVE-2024-47562 HIGH
Siemens SINEC Security Monitor < V4.9.0 - Privilege Escalation
Oct 08, 2024
CVSS 8.8
EPSS 0.00
CVE-2024-47553 CRITICAL
Siemens SINEC Security Monitor < V4.9.0 - Code Injection
Oct 08, 2024
CVSS 9.9
EPSS 0.03
CVE-2024-47196 MEDIUM
ModelSim Questa < V2025.2 - Code Injection
Oct 08, 2024
CVSS 6.7
EPSS 0.00
CVE-2024-47195 MEDIUM
ModelSim Questa < V2024.3 - Code Injection
Oct 08, 2024
CVSS 6.7
EPSS 0.00
CVE-2024-47194 MEDIUM
ModelSim Questa < V2024.3 - Code Injection
Oct 08, 2024
CVSS 6.7
EPSS 0.00