siemens

2,341 tracked vulnerabilities.

CVE-2025-27127 MEDIUM
TIA Project-Server <V2.1.1, TIA Portal <V19.4, TIA Portal <V20.3 - ...
Jul 08, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-23365 HIGH
TIA Administrator < 3.0.6 - Privilege Escalation and Arbitrary Code Execution via Cache File Overwrite
Jul 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23364 MEDIUM
TIA Administrator < 3.0.6 - Improper Verification of Cryptographic Signature
Jul 08, 2025
CVSS 6.2
EPSS 0.00
CVE-2025-40592 MEDIUM
Mendix Studio Pro <10.23.0, <10.12.17, <10.18.7, <10.6.24, <11.0.0,...
Jun 12, 2025
CVSS 6.1
EPSS 0.00
CVE-2025-40591 HIGH
RUGGEDCOM ROX -<V2.16.5 - Info Disclosure
Jun 10, 2025
CVSS 7.7
EPSS 0.00
CVE-2025-40585 CRITICAL
Energy Services - All versions with G5DFR - Privilege Escalation
Jun 10, 2025
CVSS 9.9
EPSS 0.00
CVE-2025-40569 MEDIUM
RUGGEDCOM RST2428P - Path Traversal
Jun 10, 2025
CVSS 4.8
EPSS 0.00
CVE-2025-40568 MEDIUM
RUGGEDCOM RST2428P - Path Traversal
Jun 10, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-40567 MEDIUM
RUGGEDCOM RST2428P - Path Traversal
Jun 10, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-40583 MEDIUM
SCALANCE LPE9403 - Cleartext Transmission of Sensitive Information
May 13, 2025
CVSS 4.4
EPSS 0.00
CVE-2025-40582 HIGH
SCALANCE LPE9403 Firmware - OS Command Injection via Configuration Parameter
May 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-40581 HIGH
SCALANCE LPE9403 - Authentication Bypass via SINEMA Remote Connect Edge Client
May 13, 2025
CVSS 7.1
EPSS 0.00
CVE-2025-40580 MEDIUM
SCALANCE LPE9403 < V4.0 HF0 - Stack-based Buffer Overflow
May 13, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-40579 MEDIUM
SCALANCE LPE9403 Firmware < V4.0 HF0 - Stack-based Buffer Overflow
May 13, 2025
CVSS 6.7
EPSS 0.00
CVE-2025-40578 MEDIUM
SCALANCE LPE9403 Firmware - Unauthenticated Denial of Service via Profinet Packet Flood
May 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-40577 MEDIUM
SCALANCE LPE9403 < V4.0 HF0 - Unauthenticated Denial of Service via Profinet Packet
May 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-40576 MEDIUM
SCALANCE LPE9403 < V4.0 HF0 - Unauthenticated Denial of Service via Malicious Profinet Packet
May 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-40575 MEDIUM
SCALANCE LPE9403 - Unauthenticated RCE
May 13, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-40574 HIGH
SCALANCE LPE9403 < V4.0 HF0 - Incorrect Permission Assignment for Critical Resource
May 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-40573 MEDIUM
SCALANCE LPE9403 < V4.0 HF0 - Path Traversal via Backup Restore
May 13, 2025
CVSS 4.4
EPSS 0.00
CVE-2025-40572 MEDIUM
SCALANCE LPE9403 < V4.0 HF0 - Unauthorized Information Disclosure via Incorrect Permission Assignment
May 13, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-40571 LOW
Mendix OIDC SSO <4.1.0, <4.0.1, <3.3.0 - Privilege Escalation
May 13, 2025
CVSS 2.2
EPSS 0.00
CVE-2025-40566 HIGH
SIMATIC PCS neo < V4.1 Update 3 and < V5.0 Update 1 - Insufficient Session Expiration
May 13, 2025
CVSS 8.8
EPSS 0.00
CVE-2025-40556 MEDIUM
Siemens BACnet ATEC 550-440, 550-441, 550-445, 550-446 - Denial of Service via BACnet MSTP Message
May 13, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-40555 MEDIUM
Siemens APOGEE PXC+TALON TC Series (BACnet) - Denial of Service via BACnet createObject Request
May 13, 2025
CVSS 4.7
EPSS 0.00