Product by Siemens
Siemens SINEMA Server
17 known vulnerabilities in Siemens SINEMA Server (Siemens), 1 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomwarealso in 39 other products | 9.0 | |
| Critical | CVE-2021-39275 | ap_escape_quotes buffer overflow | 9.8 | |
| High | CVE-2020-25237 | Siemens SINEC NMS: Path Traversal | 8.1 | |
| High | CVE-2021-34798 | NULL pointer dereference in httpd core | 7.5 | |
| Medium | CVE-2021-3449 | NULL pointer deref in signature_algorithms processing | 5.9 | |
| Critical | CVE-2019-10940 | Siemens SINEMA Server: Incorrect Privilege Assignment | 9.9 | |
| High | CVE-2019-6575 | Siemens SIMATIC CP 443-1 OPC UA: Uncaught Exception | 7.5 | |
| Not rated | CVE-2014-2731 | Siemens SINEMA Server: Code Execution | — | |
| Critical | CVE-2023-35796 | Siemens SINEMA Server V14: Cross-site Scripting | 8.3 | |
| Not rated | CVE-2014-2732 | Siemens SINEMA Server: Path Traversal | — | |
| Not rated | CVE-2014-2733 | Siemens SINEMA Server: Denial of Service | — | |
| High | CVE-2022-25311 | Siemens SINEC NMS: Improper Privilege Management | 7.3 | |
| Medium | CVE-2019-10941 | Siemens SINEMA Server: Missing Authentication for Critical Function | 5.3 | |
| High | CVE-2016-6486 | Siemens SINEMA Server: Privilege Escalation | 7.8 | |
| Medium | CVE-2020-7580 | Siemens SIMATIC Automation Tool: Unquoted Search Path or Element | 6.7 | |
| Medium | CVE-2017-6865 | Siemens Primary Setup Tool (PST): Denial of Service | 6.5 | |
| Medium | CVE-2016-7165 | Siemens SIMATIC WinCC: security vulnerability | 6.4 |