Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: radiotap: reject radiotap with unknown bitsCVE-2026-23367Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: usb: kalmia: validate USB endpointsCVE-2026-23365Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreksmbd: Compare MACs in constant timeCVE-2026-23364Fix available7.4 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morebpf: Fix stack-out-of-bounds write in devmapCVE-2026-23359Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecan: mcp251x: fix deadlock in error path of mcp251x_openCVE-2026-23357Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()CVE-2026-23356Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morex86/efi: defer freeing of boot services memoryCVE-2026-23352Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nft_set_pipapo: split gc into unlink and reclaim phaseCVE-2026-23351Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morexdp: produce a warning when calculated tailroom is negativeCVE-2026-23343Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscsCVE-2026-23340Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: nci: free skb on nci_transceive early error pathsCVE-2026-23339Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: cfg80211: cancel rfkill_block work in wiphy_unregister()CVE-2026-23336Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()CVE-2026-23335Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremptcp: pm: in-kernel: always mark signal+subflow endp as usedCVE-2026-23321Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morebpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shimCVE-2026-23319Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreALSA: usb-audio: Use correct version for UAC3 header validationCVE-2026-23318Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrm/vmwgfx: Return the correct value in vmw_translate_ptr functionsCVE-2026-23317Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()CVE-2026-23315Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: usb: kaweth: validate USB endpointsCVE-2026-23312Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loadedCVE-2026-23310Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()CVE-2026-23304Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresmb: client: Don't log plaintext credentials in cifs_set_cifscredsCVE-2026-23303Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: annotate data-races around sk->sk_{data_ready,write_space}CVE-2026-23302Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: ipv6: fix panic when IPv4 route references loopback IPv6 nexthopCVE-2026-23300Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: core: Fix refcount leak for tagset_refcntCVE-2026-23296Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: vxlan: fix nd_tbl NULL dereference when IPv6 is disabledCVE-2026-23293Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morescsi: target: Fix recursive locking in __configfs_open_file()CVE-2026-23292Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: pn533: properly drop the usb interface reference on disconnectCVE-2026-23291Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: usb: pegasus: validate USB endpointsCVE-2026-23290Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreirqchip/sifive-plic: Fix frozen interrupt due to affinity settingCVE-2026-23287Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()CVE-2026-23284Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: libertas: fix use-after-free in lbs_free_adapter()CVE-2026-23281Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()CVE-2026-23279Fix available5.5 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r return invalid DNS hostnamesCVE-2026-4438Fix available5.4 Medium
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moregethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseCVE-2026-4437Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: always walk all pending catchall elementsCVE-2026-23278Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmitCVE-2026-23277Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labelsCVE-2026-23274Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moremacvlan: observe an RCU grace period in macvlan_common_newlink() error pathCVE-2026-23273Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: nf_tables: unconditionally bump set->nelems before insertionCVE-2026-23272Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreperf: Fix __perf_event_overflow() vs perf_remove_from_context() raceCVE-2026-23271Fix available7.8 High
- gnu ncurses, siemens ruggedcom rst2428p +1 morencurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function...CVE-2025-69720Public exploitFix available7.3 High
- nghttp2, red hat jboss core services for rhel 8, jboss core services on rhel 7 +37 more +39 morenghttp2 Denial of service: Assertion failure due to the missing state validationCVE-2026-27135Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocksCVE-2026-23270Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: add proper RCU protection to /proc/net/ptypeCVE-2026-23255Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moremedia: dvb-core: fix wrong reinitialization of ringbuffer on reopenCVE-2026-23253Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: act_gate: snapshot parameters with RCU on replaceCVE-2026-23245Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/umad: Reject negative data_len in ib_umad_writeCVE-2026-23243Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreRDMA/siw: Fix potential NULL pointer dereference in header processingCVE-2026-23242Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morefs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LISTCVE-2025-71267Fix available5.5 Medium
- Show moreLoading…