siemens

2,373 tracked vulnerabilities.

CVE-2022-24282 HIGH
SINEC NMS < 2.0 and < 1.0.3 and SINEMA Server V14 - Remote Code Execution via Insecure JSON Deserialization
Mar 08, 2022
CVSS 7.2
EPSS 0.01
CVE-2022-24281 HIGH
SINEC NMS <V1.0.3, SINEMA Server V14 - Privilege Escalation
Mar 08, 2022
CVSS 7.2
EPSS 0.03
CVE-2022-25315 CRITICAL
libexpat < 2.4.5 - Integer Overflow in storeRawNames
Feb 18, 2022
CVSS 9.8
EPSS 0.05
CVE-2022-25314 HIGH
libexpat < 2.4.5 - Integer Overflow in copyString
Feb 18, 2022
CVSS 7.5
EPSS 0.05
CVE-2022-25313 MEDIUM
libexpat < 2.4.5 - Denial of Service via DTD Element Nesting
Feb 18, 2022
CVSS 6.5
EPSS 0.03
CVE-2022-25236 CRITICAL
libexpat < 2.4.5 - Namespace URI Injection via Namespace-Separator Character
Feb 16, 2022
CVSS 9.8
EPSS 0.34
CVE-2022-25235 CRITICAL
libexpat < 2.4.5 - Improper Encoding or Escaping of Output
Feb 16, 2022
CVSS 9.8
EPSS 0.05
CVE-2022-23312 MEDIUM
Spectrum Power 4 < V4.70 SP9 Security Patch 1 - Cross-Site Scripting in Online Help
Feb 09, 2022
CVSS 6.1
EPSS 0.01
CVE-2022-23102 MEDIUM NUCLEI
SINEMA Remote Connect Server < 2.0 - Open Redirect
Feb 09, 2022
CVSS 6.1
EPSS 0.05
CVE-2022-23990 HIGH
libexpat < 2.4.4 - Integer Overflow in doProlog Function
Jan 26, 2022
CVSS 7.5
EPSS 0.04
CVE-2022-23852 CRITICAL
libexpat < 2.4.4 - Integer Overflow in XML_GetBuffer
Jan 24, 2022
CVSS 9.8
EPSS 0.05
CVE-2022-0235 MEDIUM
node-fetch < 2.6.7 and >=3.0.0 <3.1.1 - Open Redirect via URL Validation Bypass
Jan 16, 2022
CVSS 6.1
EPSS 0.02
CVE-2022-0155 MEDIUM
follow-redirects < 1.14.7 - Exposure of Private Personal Information to an Unauthorized Actor
Jan 10, 2022
CVSS 6.5
EPSS 0.02
CVE-2022-22827 HIGH
libexpat < 2.4.3 - Integer Overflow in storeAtts
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22826 HIGH
libexpat < 2.4.3 - Integer Overflow in nextScaffoldPart
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22825 HIGH
libexpat < 2.4.3 - Integer Overflow in xmlparse.c Lookup
Jan 10, 2022
CVSS 8.8
EPSS 0.03
CVE-2022-22824 CRITICAL
libexpat < 2.4.3 - Integer Overflow in defineAttribute
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22823 CRITICAL
libexpat < 2.4.3 - Integer Overflow in build_model Function
Jan 10, 2022
CVSS 9.8
EPSS 0.03
CVE-2022-22822 CRITICAL
libexpat < 2.4.3 - Integer Overflow in addBinding
Jan 10, 2022
CVSS 9.8
EPSS 0.05
CVE-2021-38405 HIGH
Datalogics APDFL - Memory Corruption
Nov 21, 2023
CVSS 7.8
EPSS 0.01
CVE-2021-41544 HIGH
Siemens Software Center < 3.0 - DLL Hijacking via Uncontrolled Search Path
Aug 08, 2023
CVSS 7.8
EPSS 0.00
CVE-2021-44695 MEDIUM
SIMATIC S7-1200 CPU and S7-PLCSIM Advanced Firmware - Denial of Service via Crafted Packets to Port 102/tcp
Dec 13, 2022
CVSS 4.9
EPSS 0.01
CVE-2021-44694 MEDIUM
SIMATIC S7-1200 CPU and S7-PLCSIM Advanced Firmware - Denial of Service via Crafted Packets to Port 102/tcp
Dec 13, 2022
CVSS 5.5
EPSS 0.01
CVE-2021-44693 MEDIUM
SIMATIC S7-1200 CPU and S7-PLCSIM Advanced Firmware - Denial of Service via Crafted Packets to Port 102/tcp
Dec 13, 2022
CVSS 4.9
EPSS 0.01
CVE-2021-40365 HIGH
Siemens SIMATIC S7-1200 and ET 200 SP Open Controller - Denial of Service via Crafted Packets
Dec 13, 2022
CVSS 7.5
EPSS 0.01
Products
teamcenter_visualization 188 jt2go 166 tecnomatix_plant_simulation 86 simcenter_femap 78 telecontrol_server_basic 77 sinema_remote_connect_server 71 sinec_infrastructure_network_services 68 scalance_w1750d_firmware 62 parasolid 52 solid_edge 47 wincc 43 sinec_ins 42 sinec_nms 42 solid_edge_se2023 36 sppa-t3000_ms3000_migration_server 35 jt_utilities 32 comos 31 simatic_wincc 30 jt_open_toolkit 29 scalance_lpe9403_firmware 27 ruggedcom_rox_mx5000_firmware 26 ruggedcom_rox_rx1400_firmware 26 ruggedcom_rox_rx1500_firmware 26 ruggedcom_rox_rx1501_firmware 26 ruggedcom_rox_rx1510_firmware 26 ruggedcom_rox_rx1511_firmware 26 ruggedcom_rox_rx1512_firmware 26 ruggedcom_rox_rx5000_firmware 26 nucleus_net 25 nucleus_source_code 25
Quick Filters
Critical CVEs With Exploits In CISA KEV