Product by Siemens

    Sinumerik One

    9 known vulnerabilities in Sinumerik One (Siemens), 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sinumerik One (Siemens)
    CriticalCVE-2020-15782

    Siemens SIMATIC Drive Controller family: Improper Restriction of Operations within the Bounds of a Memory Buffer

    also in 8 other products

    9.8
    HighCVE-2023-28831

    Siemens SIMATIC BRAUMAT: Integer Overflow or Wraparound

    also in 155 other products

    7.5
    HighCVE-2023-46156

    Siemens SIMATIC Drive Controller CPU 1504D TF: Use After Free

    also in 139 other products

    7.5
    HighCVE-2025-40743

    Siemens SINUMERIK: Authentication Bypass Using an Alternate Path or Channel

    also in 2 other products

    8.3
    CriticalCVE-2024-41171

    Siemens SINUMERIK: Incorrect Permission Assignment for Critical Resource

    8.8
    CriticalCVE-2022-38465

    Siemens SIMATIC Drive Controller family: Insufficiently Protected Credentials

    also in 51 other products

    9.3
    HighCVE-2022-24408

    Siemens SINUMERIK MC: Improper Privilege Management

    also in 2 other products

    7.8
    MediumCVE-2024-43781

    Siemens SINUMERIK 828D V4: Insertion of Sensitive Information into Log File

    5.5
    MediumCVE-2022-30694

    Siemens SIMATIC Drive Controller CPU 1504D TF: Cross-Site Request Forgery (CSRF)

    also in 188 other products

    6.5

    All products by Siemens