Vulnerabilities > Siemens

DATE CVE VULNERABILITY TITLE RISK
2021-04-22 CVE-2020-27009 Out-of-bounds Write vulnerability in Siemens Nucleus NET and Nucleus Source Code
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5).
network
high complexity
siemens CWE-787
8.1
2021-04-22 CVE-2020-26997 Untrusted Pointer Dereference vulnerability in Siemens Solid Edge Se2020 and Solid Edge Se2021
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4).
network
siemens CWE-822
6.8
2021-04-22 CVE-2020-25244 Uncontrolled Search Path Element vulnerability in Siemens Logo! Soft Comfort
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4).
local
low complexity
siemens CWE-427
8.4
2021-04-22 CVE-2020-25243 Path Traversal vulnerability in Siemens Logo! Soft Comfort
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4).
local
low complexity
siemens CWE-22
5.1
2021-04-22 CVE-2020-15795 Out-of-bounds Write vulnerability in Siemens Nucleus NET and Nucleus Source Code
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5).
network
high complexity
siemens CWE-787
8.1
2021-04-22 CVE-2021-27393 Use of Insufficiently Random Values vulnerability in Siemens products
A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules).
network
low complexity
siemens CWE-330
5.0
2021-04-22 CVE-2021-27392 Use of Hard-coded Credentials vulnerability in Siemens Siveillance Video Open Network Bridge 2018/2019/2020
A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2).
network
low complexity
siemens CWE-798
4.0
2021-04-22 CVE-2021-27389 Use of Hard-coded Cryptographic Key vulnerability in Siemens Opcenter Quality and QMS Automotive
A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30).
network
low complexity
siemens CWE-321
7.5
2021-04-22 CVE-2021-27382 Stack-based Buffer Overflow vulnerability in Siemens Solid Edge Se2020 and Solid Edge Se2021
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4).
network
siemens CWE-121
6.8
2021-04-22 CVE-2021-25678 Out-of-bounds Write vulnerability in Siemens Solid Edge Se2020 and Solid Edge Se2021
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4).
network
siemens CWE-787
6.8