Vendor
Siemens Ag
135 known vulnerabilities in products by Siemens Ag, 0 of them actively exploited (CISA KEV).
Key figures
135
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
23
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-7593 | Siemens LOGO! 8 BM (incl. SIPLUS variants): Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2020-10055 | Siemens Desigo CC: Code Injection | 9.8 | |
| Critical | CVE-2018-4841 | Siemens TIM 1531 IRC: Incorrect Implementation of Authentication Algorithm | 9.8 | |
| Critical | CVE-2018-11466 | Siemens SINUMERIK 808D V4.7 Firmware: Uncaught Exception | 9.8 | |
| Critical | CVE-2018-11462 | Siemens SINUMERIK 808D V4.7 Firmware: Permissions, Privileges, and Access Controls | 9.8 | |
| High | CVE-2018-11455 | Siemens Automation License Manager (ALM): Path Traversal | 8.8 | |
| Critical | CVE-2018-13816 | Siemens TIM 1531 IRC: Improper Access Control | 10.0 | |
| High | CVE-2018-13807 | Siemens SCALANCE X300 Firmware: Improper Input Validation | 8.6 | |
| Critical | CVE-2018-4852 | Siemens SICLOCK TC100 Firmware: Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| High | CVE-2018-11458 | Siemens SINUMERIK 828D V4.7 Firmware: Integer Overflow or Wraparound | 8.1 | |
| High | CVE-2018-11457 | Siemens SINUMERIK 828D V4.7 Firmware: Heap-based Buffer Overflow | 8.1 | |
| Critical | CVE-2019-10922 | Siemens SIMATIC PCS 7: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2019-6572 | Siemens SIMATIC: Exposure of Sensitive Information to an Unauthorized Actor | 9.1 | |
| Critical | CVE-2019-6579 | Siemens Spectrum Power™ 4: Command Injection | 9.8 | |
| Critical | CVE-2018-4853 | Siemens SICLOCK TC100 Firmware: Missing Authentication for Critical Function | 9.8 | |
| High | CVE-2018-13801 | Siemens ROX II: Permissions, Privileges, and Access Controls | 8.8 | |
| High | CVE-2018-4854 | Siemens SICLOCK TC100 Firmware: Missing Authentication for Critical Function | 8.8 | |
| High | CVE-2018-13812 | Siemens Simatic Wincc Runtime: Path Traversal | 7.5 | |
| High | CVE-2018-4859 | Siemens SCALANCE M875: OS Command Injection | 7.2 | |
| High | CVE-2018-4860 | Siemens SCALANCE M875: OS Command Injection | 7.2 | |
| Critical | CVE-2018-13799 | Siemens Simatic Wincc Open Architecture: Improper Privilege Management | 9.1 | |
| High | CVE-2018-13802 | Siemens ROX II: Permissions, Privileges, and Access Controls | 7.2 | |
| Critical | CVE-2020-10042 | Siemens SICAM MMU: Classic Buffer Overflow | 9.8 | |
| High | CVE-2018-13804 | Siemens Simatic It Ua Discrete Manufacturing: Improper Authentication | 8.1 | |
| High | CVE-2016-9158 | Siemens SIMATIC S7-300 CPU family: Improper Input Validation | 7.5 |