Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...CVE-2026-237157.3 High
- siemens nx, nx (managed mode) +1 moreA vulnerability has been identified in NX (All versions < V2512). The affected application...CVE-2026-229237.3 High
- siemens polarion v2404, polarion v2410 +1 moreA vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 ...CVE-2025-405876.2 Medium
- siemens syngo.plaza vb30eA vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The...CVE-2024-523346.3 Medium
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: core: Wake up the error handler when final completions race against each otherCVE-2026-23110Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipvlan: Make the addrs_lock be per portCVE-2026-23103Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremm/hugetlb: fix hugetlb_pmd_shared()CVE-2026-23100Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moregue: Fix skb memleak with inner IP protocol 0.CVE-2026-23095Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morescsi: xen: scsiback: Fix potential memory leak in scsiback_remove()CVE-2026-23087Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morevsock/virtio: cap TX credit to local buffer sizeCVE-2026-23086Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morebe2net: Fix NULL pointer dereference in be_cmd_get_mac_from_listCVE-2026-23084Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefou: Don't allow 0 for FOU_ATTR_IPPROTO.CVE-2026-23083Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morerxrpc: Fix recvmsg() unconditional requeueCVE-2026-23066Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN specCVE-2026-23060Fix available5.5 Medium
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morew1: therm: Fix off-by-one buffer overflow in alarms_storeCVE-2025-71197Fix availableNo score
- linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morenet: hv_netvsc: reject RSS hash key programming without RX indirection tableCVE-2026-23054Fix available6.7 Medium
- linux, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morepnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()CVE-2026-23038Fix available2.0 Low
- linux, siemens ruggedcom rst2428p +1 morecan: etas_es58x: allow partial RX URB allocation to succeedCVE-2026-23037Fix availableNo score
- linux, siemens ruggedcom rst2428p +1 moredmaengine: omap-dma: fix dma_pool resource leak in error pathsCVE-2026-23033Fix available9.8 Critical
- linux, siemens ruggedcom rst2428p +1 morenull_blk: fix kmemleak by releasing references to fault configfs itemsCVE-2026-23032Fix available7.8 High
- linux, siemens ruggedcom rst2428p +1 morecan: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leakCVE-2026-23031Fix available6.7 Medium
- linux, siemens ruggedcom rst2428p +1 morephy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()CVE-2026-23030Fix availableNo score
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()CVE-2026-23026Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +2 moremm/page_alloc: prevent pcp corruption with SMP=nCVE-2026-23025Fix available7.8 High
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: at_hdmac: fix device leak on of_dma_xlate()CVE-2025-71191Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: bcm-sba-raid: fix device leak on probeCVE-2025-71190Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: dw: dmamux: fix OF node leak on route allocation failureCVE-2025-71189Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +2 moredmaengine: lpc18xx-dmamux: fix device leak on route allocationCVE-2025-71188Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: stm32: dmamux: fix device leak on route allocationCVE-2025-71186Fix available5.5 Medium
- linux, linux kernel, siemens ruggedcom rst2428p (6gk6242-6pa00) +5 more +7 moredmaengine: ti: dma-crossbar: fix device leak on am335x route allocationCVE-2025-71185Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: marvell: prestera: fix NULL dereference on devlink_alloc() failureCVE-2026-23019Fix available5.5 Medium
- libexpat project libexpat, siemens ruggedcom rst2428p (6gk6242-6pa00), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreIn libexpat before 2.7.4, the doContent function does not properly determine the buffer size...CVE-2026-25210Fix available6.9 Medium
- fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability...CVE-2026-24858In KEVPublic exploitEPSS 86.6%9.4 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: glib: memory corruption via integer overflow in unicode case conversionCVE-2026-1489Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreGlib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()CVE-2026-1484Fix available4.2 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() functionCVE-2026-22796Fix available5.3 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreMissing ASN1_TYPE validation in PKCS#12 parsingCVE-2026-22795Fix available5.5 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionCVE-2025-69421Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreMissing ASN1_TYPE validation in TS_RESP_verify_response() functionCVE-2025-69420Public exploitFix available7.5 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreOut of bounds write in PKCS12_get_friendlyname() UTF-8 conversionCVE-2025-69419Public exploitFix available7.4 High
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreUnauthenticated/unencrypted trailing bytes with low-level OCB function callsCVE-2025-69418Fix available4.0 Medium
- openssl, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreHeap out-of-bounds write in BIO_f_linebuffer on short writesCVE-2025-68160Fix available4.7 Medium
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv4: ip_gre: make ipgre_header() robustCVE-2026-23011Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreipv6: Fix use-after-free in inet6_addr_del().CVE-2026-23010Public exploitFix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morex86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1CVE-2026-23005Public exploitFix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()CVE-2026-23003Public exploitFix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: idxd: fix device leaks on compat bind and unbindCVE-2025-71163Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredmaengine: tegra-adma: Fix use-after-freeCVE-2025-71162Fix available7.8 High
- Show moreLoading…