Siemens vulnerabilities

Products

• Simatic S7-1500 Cpu 1518-4 Pn/dp Mfp 1,132
• Simatic S7-1500 Cpu 1518f-4 Pn/dp Mfp 1,132
• Siplus S7-1500 Cpu 1518-4 Pn/dp Mfp 1,132
• Simatic S7-1500 Tm Mfp - Gnu/linux Subsystem 952
• Ruggedcom Rst2428p 292
• Scalance Xc-300/xr-300/xc-400/xr-500wg/xr-500 Family 213
• Teamcenter Visualization 189
• Scalance Xcm-/xrm-/xch-/xrh-300 Family 187
• Simatic Cn 4100 187
• Jt2go 170
• Ruggedcom Ape1808 99
• Teamcenter Visualization 95
• Ruggedcom Rox Mx5000 91
• Ruggedcom Rox Rx1400 91
• Ruggedcom Rox Rx1500 91
• Ruggedcom Rox Rx1501 91
• Ruggedcom Rox Rx1510 91
• Ruggedcom Rox Rx1511 91
• Ruggedcom Rox Rx1512 91
• Ruggedcom Rox Rx1524 91
• Ruggedcom Rox Rx1536 91
• Ruggedcom Rox Rx5000 91
• Tecnomatix Plant Simulation 88
• Ruggedcom Rox Mx5000re 87
• Sinec Nms 79
• Simcenter Femap 78
• Telecontrol Server Basic 77
• Tecnomatix Plant Simulation V2302 75
• Telecontrol Server Basic 73
• Sinema Remote Connect Server 71
• Sinec Infrastructure Network Services 68
• Teamcenter Visualization V14.3 65
• Teamcenter Visualization V14.2 63
• Scalance W1750d Firmware 62
• Solid Edge 56
• Parasolid 52
• Sinema Remote Connect Server 50
• Teamcenter Visualization V14.1 50
• Solid Edge Se2023 49
• Teamcenter Visualization V2312 48

Show 160 moreShow less

• Teamcenter Visualization V13.3 47
• Simcenter Femap 46
• Parasolid V35.0 44
• Sinec Ins 43
• Wincc 43
• Sinec Nms 42
• Parasolid V34.1 41
• Tecnomatix Plant Simulation V2404 40
• Teamcenter Visualization V14.0 39
• Scalance M804pb 38
• Scalance M826-2 Shdsl-router 38
• Scalance M874-2 38
• Scalance M874-3 38
• Scalance M876-3 (rok) 38
• Scalance M876-4 (eu) 38
• Scalance M876-4 (nam) 38
• Scalance S615 Lan-router 38
• Ruggedcom Rm1224 Lte(4g) Eu 37
• Ruggedcom Rm1224 Lte(4g) Nam 37
• Scalance M876-3 37
• Scalance Mum853-1 (eu) 37
• Scalance Mum856-1 (eu) 37
• Scalance Mum856-1 (row) 37
• Solid Edge Se2023 36
• Tecnomatix Plant Simulation V2201 36
• Sppa-t3000 Ms3000 Migration Server 35
• Sppa-t3000 Ms3000 Migration Server 35
• Tecnomatix Plant Simulation 35
• Scalance Wam766-1 Eec (us) 34
• Scalance Wam766-1 (us) 34
• Simatic Wincc 34
• Scalance M876-4 33
• Scalance S615 Eec Lan-router 33
• Scalance Wam763-1 33
• Scalance Wum763-1 33
• Simatic S7-plcsim Advanced 33
• Solid Edge Se2021 33
• Jt Utilities 32
• Jt Utilities 32
• Scalance M812-1 Adsl-router 32
• Scalance M816-1 Adsl-router 32
• Scalance Wam766-1 32
• Scalance Wam766-1 Eec 32
• Scalance Wum766-1 32
• Scalance Wum766-1 (usa) 32
• Scalance Xch328 32
• Scalance Xcm324 32
• Scalance Xcm328 32
• Scalance Xcm332 32
• Scalance Xrh334 (24 V Dc, 8xfo, Cc) 32
• Scalance Xrm334 (230 V Ac, 12xfo) 32
• Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+) 32
• Scalance Xrm334 (230 V Ac, 8xfo) 32
• Scalance Xrm334 (24 V Dc, 12xfo) 32
• Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+) 32
• Scalance Xrm334 (24 V Dc, 8xfo) 32
• Scalance Xrm334 (2x230 V Ac, 12xfo) 32
• Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+) 32
• Scalance Xrm334 (2x230 V Ac, 8xfo) 32
• Comos 31
• Parasolid V34.0 31
• Jt Open Toolkit 29
• Ruggedcom Crossbow 29
• Simatic Ipc647e 29
• Simatic Ipc847e 29
• Solid Edge Se2022 29
• Teamcenter Visualization V13.2 28
• Scalance Lpe9403 Firmware 27
• Simatic Field Pg M5 27
• Simatic Ipc427e 27
• Simatic Ipc477e 27
• Simatic Ipc477e Pro 27
• Simatic Ipc627e 27
• Simatic Ipc677e 27
• Simatic Itp1000 27
• Simatic S7-1500 Cpu 1511-1 Pn 27
• Simatic S7-1500 Cpu 1511f-1 Pn 27
• Simatic S7-1500 Cpu 1513-1 Pn 27
• Simatic S7-1500 Cpu 1515-2 Pn 27
• Simatic S7-1500 Cpu 1515f-2 Pn 27
• Simatic S7-1500 Cpu 1516-3 Pn/dp 27
• Simatic S7-1500 Cpu 1516f-3 Pn/dp 27
• Parasolid V33.1 26
• Ruggedcom Rox Mx5000 Firmware 26
• Ruggedcom Rox Rx1400 Firmware 26
• Ruggedcom Rox Rx1500 Firmware 26
• Ruggedcom Rox Rx1501 Firmware 26
• Ruggedcom Rox Rx1510 Firmware 26
• Ruggedcom Rox Rx1511 Firmware 26
• Ruggedcom Rox Rx1512 Firmware 26
• Ruggedcom Rox Rx5000 Firmware 26
• Simatic Field Pg M6 26
• Simatic Pcs 7 26
• Simatic Pcs Neo 26
• Simatic S7-1500 Cpu 1513f-1 Pn 26
• Nucleus Net 25
• Nucleus Source Code 25
• Scalance Lpe9403 25
• Scalance Xf204 25
• Simatic Ipc127e 25
• Simatic Ipc227g 25
• Simatic Ipc277g 25
• Simatic Ipc277g Pro 25
• Simatic Ipc327g 25
• Simatic Ipc377g 25
• Simatic Pcs7 25
• Siplus Et 200sp Cpu 1512sp F-1 Pn 25
• Siplus Ipc427e 25
• Siplus S7-1500 Cpu 1511-1 Pn 25
• Siplus S7-1500 Cpu 1511f-1 Pn 25
• Siplus S7-1500 Cpu 1513-1 Pn 25
• Siplus S7-1500 Cpu 1513f-1 Pn 25
• Siplus S7-1500 Cpu 1516-3 Pn/dp 25
• Siplus S7-1500 Cpu 1516f-3 Pn/dp 25
• Scalance S615 Firmware 24
• Scalance W721-1 Rj45 24
• Scalance W722-1 Rj45 24
• Scalance W734-1 Rj45 24
• Scalance W734-1 Rj45 (usa) 24
• Scalance W738-1 M12 24
• Scalance W748-1 M12 24
• Scalance W748-1 Rj45 24
• Scalance W761-1 Rj45 24
• Scalance W774-1 M12 Eec 24
• Scalance W774-1 Rj45 24
• Scalance W774-1 Rj45 (usa) 24
• Scalance W778-1 M12 24
• Scalance W778-1 M12 Eec 24
• Scalance W778-1 M12 Eec (usa) 24
• Scalance W786-1 Rj45 24
• Scalance W786-2ia Rj45 24
• Scalance W786-2 Rj45 24
• Scalance W786-2 Sfp 24
• Scalance W788-1 M12 24
• Scalance W788-1 Rj45 24
• Scalance W788-2 M12 24
• Scalance W788-2 M12 Eec 24
• Scalance W788-2 Rj45 24
• Sicam T 24
• Simatic Drive Controller Cpu 1504d Tf 24
• Simatic Drive Controller Cpu 1507d Tf 24
• Simatic Ipc427e Firmware 24
• Simatic Ipc477e Firmware 24
• Simatic Itp1000 Firmware 24
• Simatic S7-1500 Cpu 1511c-1 Pn 24
• Simatic S7-1500 Cpu 1511t-1 Pn 24
• Simatic S7-1500 Cpu 1511tf-1 Pn 24
• Simatic S7-1500 Cpu 1512c-1 Pn 24
• Simatic S7-1500 Cpu 1515t-2 Pn 24
• Simatic S7-1500 Cpu 1515tf-2 Pn 24
• Simatic S7-1500 Cpu 1516t-3 Pn/dp 24
• Simatic S7-1500 Cpu 1516tf-3 Pn/dp 24
• Simatic S7-1500 Cpu 1517-3 Pn/dp 24
• Simatic S7-1500 Cpu 1517f-3 Pn/dp 24
• Simatic S7-1500 Cpu 1517t-3 Pn/dp 24
• Simatic S7-1500 Cpu 1517tf-3 Pn/dp 24
• Simatic S7-1500 Cpu 1518-4 Pn/dp 24
• Simatic S7-1500 Cpu 1518f-4 Pn/dp 24
• Simatic S7-1500 Cpu 1518t-4 Pn/dp 24
• Simatic S7-1500 Cpu 1518tf-4 Pn/dp 24

Newest

• @nx gradle, maven, nrwl nx +2 more Nx: OS command injection via nx.json plugin options in @nx/maven and @nx/gradle CVE-2026-119282 Fix available 7.3 HighOctober 29, 2026
• siemens mendix saml (mendix 10 compatible), mendix saml (mendix 11 compatible), mendix saml (mendix 9 compatible) +2 more A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4)... CVE-2026-89209 7.6 HighOctober 26, 2026
• php, paloaltonetworks pan-os, panorama virtual appliance +111 more +113 more RCE via stale global state CVE-2026-109619 In KEVPublic exploitFix available EPSS 100.0% 9.2 CriticalOctober 21, 2026
• php, paloaltonetworks pan-os, panorama virtual appliance +110 more +112 more RCE via OOM corruption CVE-2026-109618 In KEVPublic exploitFix available EPSS 100.0% 9.2 CriticalOctober 21, 2026
• siemens software center A vulnerability has been identified in Siemens Software Center (All versions). The affected... CVE-2026-110936 In KEVPublic exploit 8.4 HighOctober 15, 2026
• siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +7 more +9 more A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... CVE-2026-102076 8.7 HighOctober 13, 2026
• siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +7 more +9 more A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... CVE-2026-102075 8.7 HighOctober 13, 2026
• siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +7 more +9 more A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... CVE-2026-102074 8.7 HighOctober 13, 2026
• siemens apogee mbc (ppc) (bacnet), apogee mbc (ppc) (p2 ethernet), apogee mec (ppc) (bacnet) +7 more +9 more A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)... CVE-2026-102073 8.8 HighOctober 13, 2026
• siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, desigo pxc00-e.d +12 more +14 more A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions),... CVE-2026-89208 6.9 MediumOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89206 5.3 MediumOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89205 5.3 MediumOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89204 5.3 MediumOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89203 5.3 MediumOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89202 7.1 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89201 7.7 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89200 8.4 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89199 8.7 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89198 8.7 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89197 8.7 HighOctober 13, 2026
• siemens ruggedcom crossbow A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices... CVE-2026-89196 8.7 HighOctober 13, 2026
• siemens .net client library for simatic s7 webserver api A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exc… CVE-2026-85115 6.8 MediumOctober 13, 2026
• siemens .net client library for simatic s7 webserver api A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers… CVE-2026-85114 8.7 HighOctober 13, 2026
• siemens industrial edge app publisher A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).... CVE-2026-78557 7.7 HighOctober 13, 2026
• siemens industrial edge app publisher A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9).... CVE-2026-78556 7.6 HighOctober 13, 2026
• siemens simatic ipc bx-21a, simatic ipc rw-543a, simatic ipc227g / ipc277g / ipc277g pro / ipc327g / ipc377g +2 more A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC... CVE-2026-72895 8.4 HighOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly sanitize calculated signal data contained in imported calculated... CVE-2026-63357 5.3 MediumOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly sanitize calculated signal names contained in imported CSV trace... CVE-2026-63356 5.3 MediumOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly sanitize signal names contained in imported CSV trace files... CVE-2026-63355 5.3 MediumOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly validate and sanitize visual marker data contained in imported... CVE-2026-63354 9.4 CriticalOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly sanitize comment fields contained in imported trace files before... CVE-2026-63353 9.4 CriticalOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly sanitize calculated signal data contained in imported CSV trace... CVE-2026-63352 5.3 MediumOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly validate and sanitize visual properties of calculated signals... CVE-2026-63351 5.3 MediumOctober 13, 2026
• siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 more Affected devices do not properly restrict executable content contained in imported trace files. ... CVE-2026-63350 9.4 CriticalOctober 13, 2026
• siemens simatic wincc v7.5, simatic wincc v8.0, simatic wincc v8.1 +2 more A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All... CVE-2026-59241 8.7 HighOctober 13, 2026
• siemens industrial edge device kit - arm64 v1.10, industrial edge device kit - arm64 v1.11, industrial edge device kit - arm64 v1.12 +95 more +97 more Affected systems do not properly restrict access to internal APIs and paths for authenticated... CVE-2026-44415 8.9 HighOctober 13, 2026
• siemens industrial edge cloud device (iecd), industrial edge device kit - arm64 v1.10, industrial edge device kit - arm64 v1.11 +60 more +62 more A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge... CVE-2026-44414 6.9 MediumOctober 13, 2026
• wibu-systems-ag wibukey, siemens pss(r)sincal v21.5, pss(r)sincal v22.0 +1 more +3 more Out of Bound Write on WibuKey for Windows CVE-2026-84854 7.0 HighOctober 6, 2026
• nrwl nx Nx: OS command injection in the @nx/docker release pipeline CVE-2026-104859 Fix available 7.3 HighOctober 2, 2026
• nrwl nx Nx daemon and plugin worker sockets are accessible to other local users CVE-2026-104854 Fix available 8.5 HighOctober 2, 2026
• nrwl nx Nx: Path traversal in nx migrate package-migrations extraction CVE-2026-104853 Fix available 5.8 MediumOctober 2, 2026
• siemens wtv676-hb6035 web interface, wtv776-hb6035 web interface +1 more A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776... CVE-2026-89207 6.9 MediumSeptember 16, 2026
• palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 more PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface CVE-2026-0308 1.1 LowSeptember 10, 2026
• palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 more PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration CVE-2026-0309 4.0 MediumSeptember 10, 2026
• palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 more PAN-OS: Buffer Overflow Vulnerability via XML Processing CVE-2026-0310 7.2 HighSeptember 10, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all... CVE-2026-84392 2.5 LowSeptember 8, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-84393 7.3 HighSeptember 8, 2026
• hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more Cross-site request forgery in the Guardian/CMC login before 26.3.0 CVE-2026-33920 5.1 MediumSeptember 8, 2026
• hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 CVE-2026-33391 5.3 MediumSeptember 8, 2026
• hashgraph guardian, nozomi networks arc, cmc +1 more +3 more Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 CVE-2026-33389 5.3 MediumSeptember 8, 2026
• Show olderLoading…