Vendor

Siemens

1,854 known vulnerabilities.

Products

JT2Go 153 Teamcenter Visualization 93 Tecnomatix Plant Simulation V2302 75 TeleControl Server Basic 73 Teamcenter Visualization V14.3 65 Teamcenter Visualization V14.2 63 SINEC NMS 56 Teamcenter Visualization V14.1 50 Solid Edge SE2023 49 Teamcenter Visualization V2312 48 Simcenter Femap 47 Teamcenter Visualization V13.3 47 SINEMA Remote Connect Server 47 Parasolid V35.0 44 Parasolid V34.1 41 Tecnomatix Plant Simulation V2404 40 Teamcenter Visualization V14.0 39 Tecnomatix Plant Simulation V2201 36 SPPA-T3000 MS3000 Migration Server 35 RUGGEDCOM ROX MX5000 34 RUGGEDCOM ROX RX1400 34 RUGGEDCOM ROX RX1500 34 RUGGEDCOM ROX RX1501 34 RUGGEDCOM ROX RX1510 34 RUGGEDCOM ROX RX1511 34 RUGGEDCOM ROX RX1512 34 RUGGEDCOM ROX RX1524 34 RUGGEDCOM ROX RX1536 34 RUGGEDCOM ROX RX5000 34 Solid Edge SE2021 33 Tecnomatix Plant Simulation 33 JT Utilities 32 Parasolid V34.0 31 SCALANCE M804PB 31 SCALANCE M826-2 SHDSL-Router 31 SCALANCE M874-2 31 SCALANCE M874-3 31 SCALANCE M876-3 (ROK) 31 SCALANCE M876-4 (EU) 31 SCALANCE M876-4 (NAM) 31

All Critical High Medium Low Exploited only Public exploit

114 results · Clear filters · Feed

Critical 9.6

CVE-2026-63354

Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before …

Siemens SIMATIC Drive Controller CPU 1507D TF SIMATIC S7-1500 CPU 1511TF-1 PN SIMATIC S7-1500 CPU 1515TF-2 PN Windows ICS / OT

Oct 13, 2026
Critical 9.6

CVE-2026-63353

Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the…

Siemens SIMATIC S7-1500 CPU 1516-3 PN/DP SIMATIC S7-1500 CPU 1513F-1 PN SIMATIC S7-1500 CPU 1511-1 PN Windows ICS / OT

Oct 13, 2026
Critical 9.6

CVE-2026-63350

Affected devices do not properly restrict executable content contained in imported trace files. This could allow an att…

Siemens SIMATIC S7-1500 CPU 1511C-1 PN SIMATIC S7-1500 CPU 1515-2 PN SIMATIC Drive Controller CPU 1504D TF Windows ICS / OT

Oct 13, 2026
Critical 9.1

CVE-2026-44415

Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow a…

Siemens Industrial Edge Device Kit - arm64 V1.17 Industrial Edge Device Kit - x86-64 V1.18 Industrial Edge Device Kit - arm64 V1.19 Browsers ICS / OT

Oct 13, 2026
Critical 9.8

CVE-2026-62645

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web int…

Siemens Reyrolle 7SR5 ICS / OT

Sep 8, 2026
Critical 9.0

CVE-2026-50093

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control …

Siemens Siveillance Control V3.0 Siveillance Control Pro V4.0 Siveillance Control V4.0 ICS / OT

Sep 8, 2026
Critical 10.0

CVE-2026-58115 Public exploit

A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running I…

Siemens SIMATIC IoT2050 Basic (6ES7647-0BA00-0YA2) SIMATIC IoT2050 SM (6ES7647-0CA00-1AA2) SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) ICS / OT

Aug 11, 2026
Critical 10.0

CVE-2026-56451

A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applications do not properly validat…

Siemens Opcenter X ICS / OT

Jul 14, 2026
Critical 9.1

CVE-2026-41551 Public exploit

A vulnerability has been identified in ROS# (All versions < V2.2.2). Affected versions contain a path traversal vulnera…

Siemens ROS# ICS / OT

May 12, 2026
Critical 9.1

CVE-2026-25787

Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diag…

Siemens SIMATIC Drive Controller CPU 1504D TF SIMATIC S7-1500 CPU 1511T-1 PN SIMATIC S7-1500 CPU 1515T-2 PN ICS / OT

May 12, 2026
Critical 9.1

CVE-2026-25786

Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page…

Siemens SIMATIC S7-1500 CPU 1513-1 PN SIMATIC S7-1500 CPU 1516F-3 PN/DP SIMATIC S7-1500 CPU 1511C-1 PN ICS / OT

May 12, 2026
Critical 9.1

CVE-2026-22924

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properl…

Siemens SIMATIC CN 4100 ICS / OT

May 12, 2026
Critical 9.1

CVE-2025-40949

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1511 RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 ICS / OT

May 12, 2026
Critical 9.6

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through …

Siemens SIMATIC S7-1500 CPU 1515F-2 PN SIMATIC Drive Controller CPU 1507D TF SIMATIC S7-1500 CPU 1511TF-1 PN Windows ICS / OT

Mar 10, 2026
Critical 10.0

CVE-2025-40805

Affected devices do not properly enforce user authentication on specific API endpoints. This could facilitate an unauth…

Siemens Industrial Edge Device Kit - arm64 V1.17 Industrial Edge Device Kit - x86-64 V1.21 Industrial Edge Device Kit - arm64 V1.19 Browsers ICS / OT

Jan 13, 2026
Critical 9.8

CVE-2025-40771

A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMATIC CP 15…

Siemens SIMATIC CP 1542SP-1 IRC SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL SIMATIC CP 1543SP-1 ICS / OT

Oct 14, 2025
Critical 9.8

CVE-2025-40765

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affecte…

Siemens TeleControl Server Basic V3.1 ICS / OT

Oct 14, 2025
Critical 9.1

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service (SIVaaS) (All versions). The affected applic…

Siemens SIMATIC Virtualization as a Service (SIVaaS) ICS / OT

Sep 9, 2025
Critical 9.8

CVE-2025-40795

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATI…

Siemens SIMATIC PCS neo V5.0 SIMATIC PCS neo V4.1 User Management Component (UMC) ICS / OT

Sep 9, 2025
Critical 9.1

CVE-2025-40746

A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.2). Affected products do not pr…

Siemens SIMATIC RTLS Locating Manager ICS / OT

Aug 12, 2025
Critical 9.8

CVE-2025-40736

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint th…

Siemens SINEC NMS ICS / OT

Jul 8, 2025
Critical 9.9

CVE-2025-40585

A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contai…

Siemens Energy Services ICS / OT

Jun 10, 2025
Critical 9.9

CVE-2025-33025

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1524 RUGGEDCOM ROX RX5000 RUGGEDCOM ROX RX1500 ICS / OT

May 13, 2025
Critical 9.9

CVE-2025-33024

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1510 RUGGEDCOM ROX RX1512 RUGGEDCOM ROX MX5000 ICS / OT

May 13, 2025
Critical 9.9

CVE-2025-32469

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versi…

Siemens RUGGEDCOM ROX RX1536 RUGGEDCOM ROX RX1400 RUGGEDCOM ROX RX1501 ICS / OT

May 13, 2025
Critical 9.8

CVE-2025-26390

A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of a…

Siemens OZW672 OZW772 ICS / OT

May 13, 2025
Critical 10.0

CVE-2025-26389

A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in a…

Siemens OZW672 OZW772 ICS / OT

May 13, 2025
Critical 9.8

CVE-2025-27540

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …

Siemens TeleControl Server Basic ICS / OT

Apr 16, 2025
Critical 9.8

CVE-2025-27539

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …

Siemens TeleControl Server Basic ICS / OT

Apr 16, 2025
Critical 9.8

CVE-2025-27495

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is …

Siemens TeleControl Server Basic ICS / OT

Apr 16, 2025
Critical 9.8

CVE-2024-54092

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 (All versions), Industrial Edge Device …

Siemens Industrial Edge Device Kit - arm64 V1.17 Industrial Edge Device Kit - x86-64 V1.21 Industrial Edge Device Kit - arm64 V1.19 Browsers ICS / OT

Apr 8, 2025
Critical 10.0

CVE-2024-41794

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected devices contain hardco…

Siemens SENTRON 7KT PAC1260 Data Manager ICS / OT

Apr 8, 2025
Critical 9.1

CVE-2024-41790

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…

Siemens SENTRON 7KT PAC1260 Data Manager ICS / OT

Apr 8, 2025
Critical 9.1

CVE-2024-41789

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…

Siemens SENTRON 7KT PAC1260 Data Manager ICS / OT

Apr 8, 2025
Critical 9.1

CVE-2024-41788

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected d…

Siemens SENTRON 7KT PAC1260 Data Manager ICS / OT

Apr 8, 2025
Critical 9.1

CVE-2025-27494

A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V6.4.9), SiPass integrated ACC…

Siemens SiPass integrated ACC-AP SiPass integrated AC5102 (ACC-G2) ICS / OT

Mar 11, 2025
Critical 9.8

CVE-2024-56336

A vulnerability has been identified in SINAMICS S200 (All versions with serial number beginning with SZVS8, SZVS9, SZVS…

Siemens SINAMICS S200 ICS / OT

Mar 11, 2025
Critical 9.8

CVE-2024-49775

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2501.0001), Opcenter Intelligence…

Siemens SINEC NMS Totally Integrated Automation Portal (TIA Portal) V18 Totally Integrated Automation Portal (TIA Portal) V17 ICS / OT

Dec 16, 2024
Critical 9.8

CVE-2024-52335

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not p…

Siemens syngo.plaza VB30E ICS / OT

Dec 6, 2024
Critical 9.1

CVE-2024-46890

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not …

Siemens SINEC INS ICS / OT

Nov 12, 2024