Vulnerabilities > Siemens

DATE CVE VULNERABILITY TITLE RISK
2019-06-12 CVE-2019-6582 Incorrect Authorization vulnerability in Siemens products
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a).
network
low complexity
siemens CWE-863
7.1
2019-06-12 CVE-2019-6581 Unspecified vulnerability in Siemens products
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a).
network
low complexity
siemens
8.8
2019-06-12 CVE-2019-6580 Missing Authorization vulnerability in Siemens products
A vulnerability has been identified in Siveillance VMS 2017 R2 (All versions < V11.2a), Siveillance VMS 2018 R1 (All versions < V12.1a), Siveillance VMS 2018 R2 (All versions < V12.2a), Siveillance VMS 2018 R3 (All versions < V12.3a), Siveillance VMS 2019 R1 (All versions < V13.1a).
network
low complexity
siemens CWE-862
critical
9.8
2019-06-12 CVE-2019-6571 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Siemens Logo!8 Firmware 1.80.00/1.81.00
A vulnerability has been identified in SIEMENS LOGO!8 (6ED1052-xyyxx-0BA8 FS:01 to FS:06 / Firmware version V1.80.xx and V1.81.xx), SIEMENS LOGO!8 (6ED1052-xyy08-0BA0 FS:01 / Firmware version < V1.82.02).
network
low complexity
siemens CWE-119
7.5
2019-06-12 CVE-2019-6567 Insufficiently Protected Credentials vulnerability in Siemens products
A vulnerability has been identified in SCALANCE X-200 switch family (incl.
local
low complexity
siemens CWE-522
5.5
2019-06-12 CVE-2019-10926 Unspecified vulnerability in Siemens Simatic Mv420 Firmware and Simatic Mv440 Firmware
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).
network
high complexity
siemens
5.3
2019-06-12 CVE-2019-10925 Unspecified vulnerability in Siemens Simatic Mv420 Firmware and Simatic Mv440 Firmware
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).
network
low complexity
siemens
7.1
2019-05-16 CVE-2019-0708 Use After Free vulnerability in multiple products
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests, aka 'Remote Desktop Services Remote Code Execution Vulnerability'.
network
low complexity
microsoft siemens huawei CWE-416
critical
9.8
2019-05-14 CVE-2019-6578 Resource Exhaustion vulnerability in Siemens products
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28), SINAMICS PERFECT HARMONY GH180 with NXG II control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- (All Versions with option G28).
network
low complexity
siemens CWE-400
7.5
2019-05-14 CVE-2019-6577 Cross-site Scripting vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions).
network
low complexity
siemens CWE-79
5.4