siemens

2,341 tracked vulnerabilities.

CVE-2016-8562 HIGH KEV
SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 < 2.0.28 - Denial of Service via SNMP Variable Write
Nov 18, 2016
CVSS 7.5
EPSS 0.19
CVE-2016-8561 MEDIUM
SIMATIC CP 1543-1 - Privilege Escalation
Nov 18, 2016
CVSS 6.6
EPSS 0.01
CVE-2016-7165 MEDIUM
Siemens Primary Setup Tool < V4.2 HF1 - Unquoted Service Path Privilege Escalation
Nov 15, 2016
CVSS 6.4
EPSS 0.00
CVE-2016-8565 CRITICAL
Siemens Automation License Manager < 5.3 SP3 - Unauthenticated Arbitrary File Write and Directory Manipulation
Oct 13, 2016
CVSS 9.1
EPSS 0.01
CVE-2016-8564 MEDIUM
Siemens ALM <5.3 SP3 Update 1 - SQL Injection
Oct 13, 2016
CVSS 6.5
EPSS 0.00
CVE-2016-8563 HIGH
Siemens Automation License Manager < 5.3 SP3 Update 1 - Denial of Service via Crafted TCP Packets to Port 4410
Oct 13, 2016
CVSS 7.5
EPSS 0.01
CVE-2016-7960 LOW
SIMATIC STEP 7 < 13.010 - Exposure of Sensitive Configuration Information via TIA Project File
Oct 13, 2016
CVSS 2.5
EPSS 0.00
CVE-2016-7959 MEDIUM
SIMATIC STEP 7 < 13.010 - Sensitive Information Exposure via TIA Project File
Oct 13, 2016
CVSS 4.7
EPSS 0.00
CVE-2016-7090 MEDIUM
Siemens SCALANCE M-800 and S615 Firmware < 4.02 - Session Cookie Exposure via Missing Secure Flag
Sep 29, 2016
CVSS 4.0
EPSS 0.00
CVE-2016-7114 HIGH
Siemens EN100 Ethernet Module Firmware - Authenticated Authentication Bypass via Web Interface
Sep 06, 2016
CVSS 8.8
EPSS 0.01
CVE-2016-7113 HIGH
Siemens EN100 Ethernet Module Firmware - Denial of Service via Crafted Packets to Port 80
Sep 06, 2016
CVSS 7.5
EPSS 0.01
CVE-2016-7112 CRITICAL
Siemens EN100 Ethernet Module Firmware < 4.28 - Improper Authentication
Sep 06, 2016
CVSS 9.8
EPSS 0.01
CVE-2016-6486 HIGH
Siemens SINEMA Server - Privilege Escalation
Aug 08, 2016
CVSS 7.8
EPSS 0.00
CVE-2016-6204 MEDIUM
Siemens SINEMA Remote Connect <1.2 - XSS
Jul 22, 2016
CVSS 6.1
EPSS 0.00
CVE-2016-5874 HIGH
Siemens SIMATIC NET PC-Software <13 SP2 - DoS
Jul 22, 2016
CVSS 7.5
EPSS 0.01
CVE-2016-5744 HIGH
Siemens SIMATIC WinCC <7.2 - Info Disclosure
Jul 22, 2016
CVSS 7.5
EPSS 0.01
CVE-2016-5743 CRITICAL
Siemens SIMATIC WinCC < 7.3 U10/7.4 < U1, BATCH < 8.1 SP1 U9, OpenPCS 7 < 8.1 U3/8.2 < U1 - RCE via Crafted Packets
Jul 22, 2016
CVSS 9.8
EPSS 0.18
CVE-2016-4956 MEDIUM
NTP 4.x < 4.2.8p8 - Denial of Service via Spoofed Broadcast Packet
Jul 05, 2016
CVSS 5.3
EPSS 0.01
CVE-2016-4955 MEDIUM
NTP 4.x < 4.2.8p8 - Denial of Service via Spoofed Crypto-NAK or Incorrect MAC Packet
Jul 05, 2016
CVSS 5.9
EPSS 0.02
CVE-2016-4954 HIGH
ntp 4.x < 4.2.8p8 - Denial of Service via Spoofed Packet Processing
Jul 05, 2016
CVSS 7.5
EPSS 0.05
CVE-2016-4953 HIGH
ntp 4.x < 4.2.8p8 - Denial of Service via Spoofed Crypto-NAK Packet
Jul 05, 2016
CVSS 7.5
EPSS 0.14
CVE-2016-5849 LOW
Siemens SICAM PAS <8.07 - Info Disclosure
Jul 04, 2016
CVSS 2.5
EPSS 0.00
CVE-2016-5848 MEDIUM
Siemens SICAM PAS <8.07 - Info Disclosure
Jul 04, 2016
CVSS 6.7
EPSS 0.00
CVE-2016-3949 HIGH
SIMATIC S7-300 CPU < 3.2.12/3.3.12 DoS via ISO-TSAP/Profibus Packets
Jun 27, 2016
CVSS 7.5
EPSS 0.05
CVE-2016-4785 MEDIUM
SIPROTEC Firmware - Exposure of Sensitive Information via Web Server
May 31, 2016
CVSS 5.3
EPSS 0.02