siemens Vulnerability Advisory Catalog

Total 1,804 security vulnerabilities recorded for siemens software and firmware.

← Back to All Vendors
Component: siemens_opc_ua_modeling_editor

A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8). Affected products suffer from a XML external ent...

📅 2023-11-14
CVSS 7.5 Dossier →
Component: simatic_pcs_neo

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vulnerability in the Administrati...

📅 2023-11-14
CVSS 5.4 Dossier →
Component: simatic_pcs_neo

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). When accessing the Information Server from affected products, the produc...

📅 2023-11-14
CVSS 8.0 Dossier →
Component: simatic_pcs_neo

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly neutralize user p...

📅 2023-11-14
CVSS 6.3 Dossier →
Component: simatic_pcs_neo

A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). The PUD Manager of affected products does not properly authenticate user...

📅 2023-11-14
CVSS 6.5 Dossier →
Component: mendix

A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications using Mendix 7 (All versions ...

📅 2023-11-14
CVSS 6.8 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4...

📅 2023-11-14
CVSS 6.5 Dossier →
CVE-2023-44373 CRITICAL
Component: 6gk5205-3bb00-2ab2_firmware

Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with administrative privileges to inject ...

📅 2023-11-14
CVSS 9.1 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4...

📅 2023-11-14
CVSS 3.7 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenti...

📅 2023-11-14
CVSS 2.7 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108...

📅 2023-11-14
CVSS 4.3 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4...

📅 2023-11-14
CVSS 4.9 Dossier →
Component: 6gk5205-3bb00-2ab2_firmware

Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device. This could allow an authe...

📅 2023-11-14
CVSS 4.9 Dossier →
Component: scalance_xb208_\(e\/ip\)_firmware

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108...

📅 2023-11-14
CVSS 7.2 Dossier →
CVE-2023-43505 CRITICAL
Component: comos

A vulnerability has been identified in COMOS (All versions). The affected application lacks proper access controls in SMB shares. This could allow an ...

📅 2023-11-14
CVSS 9.6 Dossier →
CVE-2023-43504 CRITICAL
Component: comos

A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validation service in affected applic...

📅 2023-11-14
CVSS 9.6 Dossier →
Component: comos

A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks sensitive information such as ...

📅 2023-11-14
CVSS 3.5 Dossier →
Component: simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited...

📅 2023-10-10
CVSS 7.5 Dossier →
Component: parasolid

A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36.0 (All ve...

📅 2023-10-10
CVSS 7.8 Dossier →
Component: sicam_pas\/pqs

A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20). The affected application is installed with specific files and fo...

📅 2023-10-10
CVSS 7.8 Dossier →
Component: tecnomatix

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions ...

📅 2023-10-10
CVSS 7.8 Dossier →
Component: sinec_nms

A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application improperly sanitizes certain SNMP configuration data ...

📅 2023-10-10
CVSS 4.7 Dossier →
Component: tecnomatix

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions ...

📅 2023-10-10
CVSS 7.8 Dossier →
Component: tecnomatix

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions ...

📅 2023-10-10
CVSS 7.8 Dossier →
Page 20 of 76 (1,804 Total Records)