Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreALSA: usb-audio: fix race condition to UAF in snd_usbmidi_freeCVE-2025-39997Fix availableNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenexthop: Forbid FDB status change while nexthop is in a groupCVE-2025-39980Fix available6.8 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreocteontx2-pf: Fix potential use after free in otx2_tc_add_flow()CVE-2025-39978Fix available7.8 High
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morefutex: Prevent use-after-free during requeue-PICVE-2025-39977Fix available7.8 High
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0...CVE-2025-315142.6 Low
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS...CVE-2025-313664.5 Medium
- fortinet fortios, fortiproxy, fortipam +1 more +3 moreAn Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy...CVE-2025-252536.8 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version...CVE-2025-577406.7 Medium
- fortinet fortios, fortiproxy, fortisase +1 more +3 moreAn URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7...CVE-2025-478902.5 Low
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3...CVE-2025-589032.5 Low
- siemens solid edge se2024, solid edge se2025 +1 moreA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid...CVE-2025-408127.3 High
- siemens solid edge se2024, solid edge se2025 +1 moreA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid...CVE-2025-408117.3 High
- siemens solid edge se2024, solid edge se2025 +1 moreA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid...CVE-2025-408107.3 High
- siemens solid edge se2024, solid edge se2025 +1 moreA vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid...CVE-2025-408097.3 High
- siemens sipass integratedA vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server...CVE-2025-407746.7 Medium
- siemens sipass integratedA vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server...CVE-2025-407735.1 Medium
- siemens sipass integratedA vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server...CVE-2025-407727.0 High
- siemens simatic cp 1542sp-1, simatic cp 1542sp-1 irc, simatic cp 1543sp-1 +3 more +5 moreA vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions <...CVE-2025-407719.3 Critical
- siemens telecontrol server basic v3.1, telecontrol server basic +1 moreA vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 <...CVE-2025-407659.3 Critical
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V4.0 SP1). Affected applications...CVE-2025-407558.7 High
- siemens simatic s7-1200 cpu v1 family (incl. siplus variants), simatic s7-1200 cpu v2 family (incl. siplus variants) +1 moreA vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All...CVE-2011-200028.3 High
- siemens simatic s7-1200 cpu v1 family (incl. siplus variants), simatic s7-1200 cpu v2 family (incl. siplus variants) +1 moreA vulnerability has been identified in SIMATIC S7-1200 CPU V1 family (incl. SIPLUS variants) (All...CVE-2011-200018.7 High
- linux kernel, linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +6 more +8 morecrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgCVE-2025-39964In KEVPublic exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().CVE-2025-39955Fix available7.8 High
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflowCVE-2025-11495Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-boundsCVE-2025-11494Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c get_link_hash_entry out-of-boundsCVE-2025-11414Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-boundsCVE-2025-11413Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-boundsCVE-2025-11412Fix available4.8 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...CVE-2025-61985Fix available3.6 Low
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moressh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...CVE-2025-61984Public exploitFix available3.6 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecgroup: split cgroup_destroy_wq into 3 workqueuesCVE-2025-39953Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: af_alg - Set merge to zero early in af_alg_sendmsgCVE-2025-39931Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moresmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error pathCVE-2025-39929Fix available7.5 High
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7...CVE-2025-228626.3 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +2 moretcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.CVE-2025-39913Public exploitFix available7.8 High
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +27 more +29 moreOut-of-bounds read in HTTP client no_proxy handlingCVE-2025-9232Fix available5.9 Medium
- openssl, siemens ruggedcom rst2428p, ruggedcom rst2428p firmware +20 more +22 moreTiming side-channel in SM2 algorithm on 64 bit ARMCVE-2025-9231Fix available5.9 Medium
- openssl, debian linux, siemens ruggedcom rst2428p +27 more +29 moreOut-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230Fix available9.8 Critical
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflowCVE-2025-11083Fix available4.8 Medium
- gnu binutils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflowCVE-2025-11082Fix available4.8 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: idxd: Remove improper idxd_freeCVE-2025-39871Fix available7.8 High
- debian linux, linux kernel, siemens simatic cn 4100 +5 more +7 morefs: writeback: fix use-after-free in __mark_inode_dirty()CVE-2025-39866Public exploitFix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moretee: fix NULL pointer dereference in tee_shm_putCVE-2025-39865Fix available5.5 Medium
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morewifi: cfg80211: fix use-after-free in cmp_bss()CVE-2025-39864Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info workCVE-2025-39863Fix available7.8 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 moreBluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()CVE-2025-39860Fix available8.0 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morenet/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()CVE-2025-39857Fix available7.5 High
- debian linux, linux kernel, siemens ruggedcom rst2428p +16 more +18 morei40e: Fix potential invalid access when MAC list is emptyCVE-2025-39853Fix available7.1 High
- debian linux, linux kernel, siemens simatic cn 4100 +2 morewifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()CVE-2025-39849Fix available8.8 High
- Show moreLoading…