siemens

2,373 tracked vulnerabilities.

CVE-2018-4843 MEDIUM
SIMATIC S7-400 CPU 414-3 PN/DP V7 < V7.0.3 - Denial of Service via PROFINET DCP Packet
Mar 20, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-4840 HIGH
Siemens DIGSI 4 < 4.92 and EN100 Ethernet Modules - Unauthenticated Device Configuration Upload
Mar 08, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-4839 MEDIUM
Siemens SIPROTEC and DIGSI - Inadequate Encryption Strength
Mar 08, 2018
CVSS 5.3
EPSS 0.01
CVE-2018-4838 HIGH
Siemens EN100 Ethernet Module - Unauthenticated Firmware Upgrade/Downgrade via Web Interface
Mar 08, 2018
CVSS 7.5
EPSS 0.01
CVE-2018-5381 MEDIUM
Quagga < 1.2.3 - Denial of Service via BGP OPEN Message Capability Parsing
Feb 19, 2018
CVSS 6.5
EPSS 0.31
CVE-2018-5380 MEDIUM
Quagga < 1.2.3 - Out-of-bounds Read in BGP Daemon Debug Code-to-String Conversion
Feb 19, 2018
CVSS 4.3
EPSS 0.15
CVE-2018-5379 HIGH
Quagga BGP daemon <1.2.3 - Use After Free
Feb 19, 2018
CVSS 7.5
EPSS 0.39
CVE-2018-4837 HIGH
TeleControl Server Basic < 3.1 - Denial of Service via Web Server
Jan 25, 2018
CVSS 7.5
EPSS 0.03
CVE-2018-4836 HIGH
TeleControl Server Basic < 3.1 - Authenticated Privilege Escalation via Port 8000
Jan 25, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-4835 MEDIUM
TeleControl Server Basic < 3.1 - Unauthenticated Authentication Bypass via Port 8000
Jan 25, 2018
CVSS 5.3
EPSS 0.02
CVE-2018-4834 CRITICAL
Siemens Desigo PXC/PXM - Unauthenticated Firmware Upload
Jan 24, 2018
CVSS 9.8
EPSS 0.03
CVE-2017-18922 CRITICAL
LibVNCServer <0.9.12 - Buffer Overflow
Jun 30, 2020
CVSS 9.8
EPSS 0.02
CVE-2017-11175 MEDIUM
Siemens FIN Stack 4.0 - Reflected Cross-Site Scripting via Login Query String
Jul 05, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-5753 MEDIUM
Intel Atom - Information Disclosure via Speculative Execution Side-Channel
Jan 04, 2018
CVSS 5.6
EPSS 0.94
CVE-2017-5715 MEDIUM
Intel Atom C/E/X3 - Information Disclosure via Speculative Execution Side-Channel
Jan 04, 2018
CVSS 5.6
EPSS 0.74
CVE-2017-9944 CRITICAL
Siemens 7KT PAC1200 Data Manager < V2.03 - Unauthenticated Privilege Escalation via Web Server
Dec 27, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-12741 HIGH
SIMATIC S7-200 Firmware < 2.03.01 - Denial of Service via Crafted UDP Packets
Dec 26, 2017
CVSS 7.5
EPSS 0.03
CVE-2017-12740 MEDIUM
Siemens LOGO! Soft Comfort < 8.2 - Remote Code Execution via Unprotected Software Package Download
Dec 26, 2017
CVSS 5.9
EPSS 0.01
CVE-2017-12736 HIGH
Siemens SCALANCE and RUGGEDCOM - Unauthenticated Unauthorized Administrative Access via RCDP
Dec 26, 2017
CVSS 8.8
EPSS 0.01
CVE-2017-13099 HIGH
wolfSSL < 3.12.2 - Private Key Recovery via Bleichenbacher Oracle in RSA Key Exchange
Dec 13, 2017
CVSS 7.5
EPSS 0.25
CVE-2017-5712 HIGH
Intel Manageability Engine Firmware 8.x-11.20 - Authenticated Buffer Overflow in Active Management Technology
Nov 21, 2017
CVSS 7.2
EPSS 0.04
CVE-2017-5711 HIGH
Intel Manageability Engine Firmware 8.x-11.20 - Buffer Overflow
Nov 21, 2017
CVSS 7.8
EPSS 0.01
CVE-2017-12739 CRITICAL
Siemens SICAM RTUs SM-2556 COM Modules - RCE
Nov 15, 2017
CVSS 9.8
EPSS 0.06
CVE-2017-12738 MEDIUM
Siemens SICAM RTUs SM-2556 COM Modules - Cross-Site Scripting via Integrated Web Server
Nov 15, 2017
CVSS 6.1
EPSS 0.01
CVE-2017-12737 MEDIUM
Siemens SICAM RTUs SM-2556 COM Modules - Unauthenticated Exposure of Sensitive Information via Web Server
Nov 15, 2017
CVSS 5.3
EPSS 0.02
Products
teamcenter_visualization 188 jt2go 166 tecnomatix_plant_simulation 86 simcenter_femap 78 telecontrol_server_basic 77 sinema_remote_connect_server 71 sinec_infrastructure_network_services 68 scalance_w1750d_firmware 62 parasolid 52 solid_edge 47 wincc 43 sinec_ins 42 sinec_nms 42 solid_edge_se2023 36 sppa-t3000_ms3000_migration_server 35 jt_utilities 32 comos 31 simatic_wincc 30 jt_open_toolkit 29 scalance_lpe9403_firmware 27 ruggedcom_rox_mx5000_firmware 26 ruggedcom_rox_rx1400_firmware 26 ruggedcom_rox_rx1500_firmware 26 ruggedcom_rox_rx1501_firmware 26 ruggedcom_rox_rx1510_firmware 26 ruggedcom_rox_rx1511_firmware 26 ruggedcom_rox_rx1512_firmware 26 ruggedcom_rox_rx5000_firmware 26 nucleus_net 25 nucleus_source_code 25
Quick Filters
Critical CVEs With Exploits In CISA KEV