Skip to contentSiemens vulnerabilities
Products
Show 140 moreShow less
- Scalance M876-4 (nam)36
- Scalance S615 Lan-router36
- Solid Edge Se202336
- Tecnomatix Plant Simulation V220136
- Ruggedcom Rm1224 Lte(4g) Eu35
- Ruggedcom Rm1224 Lte(4g) Nam35
- Scalance M876-335
- Scalance Mum853-1 (eu)35
- Scalance Mum856-1 (eu)35
- Scalance Mum856-1 (row)35
- Simatic Wincc35
- Sppa-t3000 Ms3000 Migration Server35
- Sppa-t3000 Ms3000 Migration Server35
- Tecnomatix Plant Simulation35
- Simatic S7-plcsim Advanced33
- Solid Edge Se202133
- Jt Utilities32
- Jt Utilities32
- Scalance Wam766-1 Eec (us)32
- Scalance Wam766-1 (us)32
- Comos31
- Parasolid V34.031
- Scalance M812-1 Adsl-router31
- Scalance M816-1 Adsl-router31
- Scalance M876-431
- Scalance S615 Eec Lan-router31
- Scalance Wam763-131
- Scalance Wum763-131
- Scalance Xch32831
- Scalance Xcm32431
- Scalance Xcm32831
- Scalance Xcm33231
- Scalance Xrh334 (24 V Dc, 8xfo, Cc)31
- Scalance Xrm334 (230 V Ac, 12xfo)31
- Scalance Xrm334 (230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (230 V Ac, 8xfo)31
- Scalance Xrm334 (24 V Dc, 12xfo)31
- Scalance Xrm334 (24v Dc, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (24 V Dc, 8xfo)31
- Scalance Xrm334 (2x230 V Ac, 12xfo)31
- Scalance Xrm334 (2x230v Ac, 2x10g, 24xsfp, 8xsfp+)31
- Scalance Xrm334 (2x230 V Ac, 8xfo)31
- Scalance Wam766-130
- Scalance Wam766-1 Eec30
- Scalance Wum766-130
- Scalance Wum766-1 (usa)30
- Jt Open Toolkit29
- Ruggedcom Crossbow29
- Simatic Ipc647e29
- Simatic Ipc847e29
- Solid Edge Se202229
- Teamcenter Visualization V13.228
- Scalance Lpe9403 Firmware27
- Simatic Field Pg M527
- Simatic Ipc427e27
- Simatic Ipc477e27
- Simatic Ipc477e Pro27
- Simatic Ipc627e27
- Simatic Ipc677e27
- Simatic Itp100027
- Parasolid V33.126
- Ruggedcom Rox Mx5000 Firmware26
- Ruggedcom Rox Rx1400 Firmware26
- Ruggedcom Rox Rx1500 Firmware26
- Ruggedcom Rox Rx1501 Firmware26
- Ruggedcom Rox Rx1510 Firmware26
- Ruggedcom Rox Rx1511 Firmware26
- Ruggedcom Rox Rx1512 Firmware26
- Ruggedcom Rox Rx5000 Firmware26
- Simatic Field Pg M626
- Simatic Pcs 726
- Simatic Pcs Neo26
- Simatic S7-1500 Cpu 1511-1 Pn26
- Simatic S7-1500 Cpu 1511f-1 Pn26
- Simatic S7-1500 Cpu 1513-1 Pn26
- Simatic S7-1500 Cpu 1513f-1 Pn26
- Simatic S7-1500 Cpu 1515-2 Pn26
- Simatic S7-1500 Cpu 1515f-2 Pn26
- Simatic S7-1500 Cpu 1516-3 Pn/dp26
- Simatic S7-1500 Cpu 1516f-3 Pn/dp26
- Nucleus Net25
- Nucleus Source Code25
- Simatic Ipc127e25
- Simatic Ipc227g25
- Simatic Ipc277g25
- Simatic Ipc277g Pro25
- Simatic Ipc327g25
- Simatic Ipc377g25
- Simatic Pcs725
- Simatic Wincc V7.525
- Siplus Et 200sp Cpu 1512sp F-1 Pn25
- Siplus Ipc427e25
- Siplus S7-1500 Cpu 1511-1 Pn25
- Siplus S7-1500 Cpu 1511f-1 Pn25
- Siplus S7-1500 Cpu 1513-1 Pn25
- Siplus S7-1500 Cpu 1513f-1 Pn25
- Siplus S7-1500 Cpu 1516-3 Pn/dp25
- Siplus S7-1500 Cpu 1516f-3 Pn/dp25
- Scalance Lpe940324
- Scalance S615 Firmware24
- Sicam T24
- Simatic Drive Controller Cpu 1504d Tf24
- Simatic Drive Controller Cpu 1507d Tf24
- Simatic Ipc427e Firmware24
- Simatic Ipc477e Firmware24
- Simatic Itp1000 Firmware24
- Simatic S7-1500 Cpu 1511c-1 Pn24
- Simatic S7-1500 Cpu 1511t-1 Pn24
- Simatic S7-1500 Cpu 1511tf-1 Pn24
- Simatic S7-1500 Cpu 1512c-1 Pn24
- Simatic S7-1500 Cpu 1515t-2 Pn24
- Simatic S7-1500 Cpu 1515tf-2 Pn24
- Simatic S7-1500 Cpu 1516t-3 Pn/dp24
- Simatic S7-1500 Cpu 1516tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1517-3 Pn/dp24
- Simatic S7-1500 Cpu 1517f-3 Pn/dp24
- Simatic S7-1500 Cpu 1517t-3 Pn/dp24
- Simatic S7-1500 Cpu 1517tf-3 Pn/dp24
- Simatic S7-1500 Cpu 1518-4 Pn/dp24
- Simatic S7-1500 Cpu 1518f-4 Pn/dp24
- Simatic S7-1500 Cpu 1518t-4 Pn/dp24
- Simatic S7-1500 Cpu 1518tf-4 Pn/dp24
- Siplus S7-1500 Cpu 1518-4 Pn/dp24
- Siplus S7-1500 Cpu 1518f-4 Pn/dp24
- Scalance W721-1 Rj4523
- Scalance W722-1 Rj4523
- Scalance W734-1 Rj4523
- Scalance W734-1 Rj45 (usa)23
- Scalance W738-1 M1223
- Scalance W748-1 M1223
- Scalance W748-1 Rj4523
- Scalance W761-1 Rj4523
- Scalance W774-1 M12 Eec23
- Scalance W774-1 Rj4523
- Scalance W774-1 Rj45 (usa)23
- Scalance W778-1 M1223
- Scalance W778-1 M12 Eec23
- Scalance W778-1 M12 Eec (usa)23
- Scalance W786-1 Rj4523
- Scalance W786-2ia Rj4523
Newest
- openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePossible NULL Dereference When Processing CMS KeyTransportRecipientInfoCVE-2026-28390Fix available7.5 High
- openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePossible NULL Dereference When Processing CMS KeyAgreeRecipientInfoCVE-2026-28389Fix available7.5 High
- openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreNULL Pointer Dereference When Processing a Delta CRLCVE-2026-28388Fix available7.5 High
- openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 morePotential Use-after-free in DANE Client CodeCVE-2026-28387Fix available8.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenetfilter: conntrack: add missing netlink policy validationsCVE-2026-31407Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreNFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fdCVE-2026-31403Fix available7.8 High
- linux, linux kernel, red hat enterprise linux 10 +22 more +24 morenfsd: fix heap overflow in NFSv4.0 LOCK replay cacheCVE-2026-31402Public exploitFix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: macb: fix use-after-free access to PTP clockCVE-2026-31396Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morecrypto: atmel-sha204a - Fix OOM ->tfm_count leakCVE-2026-31391Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: fix use-after-free on controller registration failureCVE-2026-31389Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morespi: fix statistics allocationCVE-2026-23475Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremtd: Avoid boot crash in RedBoot partition table parserCVE-2026-23474Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moresoc: fsl: qbman: fix race condition in qman_destroy_fqCVE-2026-23463Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()CVE-2026-23458Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()CVE-2026-23457Fix available8.6 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS caseCVE-2026-23456Fix available8.2 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nf_conntrack_h323: check for zero length in DecodeQ931()CVE-2026-23455Fix available9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardownCVE-2026-23454Fix available7.0 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morePM: runtime: Fix a race condition related to device removalCVE-2026-23452Fix available4.7 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()CVE-2026-23450Fix available9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet/sched: teql: Fix double-free in teql_master_xmitCVE-2026-23449Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: usb: aqc111: Do not perform PM inside suspend callbackCVE-2026-23446Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failureCVE-2026-23444Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreipv6: add NULL checks for idev in SRv6 pathsCVE-2026-23442Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreudp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=nCVE-2026-23439Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: mvpp2: guard flow control update with global_tx_fc in buffer switchingCVE-2026-23438Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremtd: rawnand: serialize lock/unlock against other NAND operationsCVE-2026-23434Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moredpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handlerCVE-2026-23422Fix available7.8 High
- sudo project sudo, red hat ai inference server 3.3, enterprise linux 10 +25 more +27 moreIn Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during...CVE-2026-35535Fix available7.4 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moretls: Purge async_hold in tls_decrypt_async_wait()CVE-2026-23414Fix available7.5 High
- gnu glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreiconv crash due to assertion failure with untrusted inputCVE-2026-4046Fix available7.5 High
- libarchive, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 moreLibarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processingCVE-2026-5121Fix available7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenf_tables: nft_dynset: fix possible stateful expression memleak in error pathCVE-2026-23399Fix available5.5 Medium
- siemens cpci85 central processing/communication, sicore base system +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-276648.7 High
- siemens cpci85 central processing/communication, rtum85 rtu base +1 moreA vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <...CVE-2026-276637.1 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreicmp: fix NULL pointer dereference in icmp_tag_validation()CVE-2026-23398Public exploitFix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenfnetlink_osf: validate individual option lengths in fingerprintsCVE-2026-23397Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morewifi: mac80211: fix NULL deref in mesh_matches_local()CVE-2026-23396Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreBluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQCVE-2026-23395Fix available8.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nf_tables: release flowtable after rcu grace period on errorCVE-2026-23392Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: xt_CT: drop pending enqueued packets on template removalCVE-2026-23391Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreice: Fix memory leak in ice_set_ringparam()CVE-2026-23389Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreSquashfs: check metadata block offset is within rangeCVE-2026-23388Fix available7.1 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreHID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing themCVE-2026-23382Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: bridge: fix nd_tbl NULL dereference when IPv6 is disabledCVE-2026-23381Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: ets: fix divide by zero in the offload pathCVE-2026-23379Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet/sched: act_ife: Fix metalist update behaviorCVE-2026-23378Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfc: rawsock: cancel tx_work before socket teardownCVE-2026-23372Fix available7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreplatform/x86: dell-wmi-sysman: Don't hex dump plaintext password dataCVE-2026-23370Fix available5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenet: phy: register phy led_triggers during probe to avoid AB-BA deadlockCVE-2026-23368Fix available5.5 Medium
- Show moreLoading…