Vulnerabilities > Siemens

DATE CVE VULNERABILITY TITLE RISK
2023-10-10 CVE-2022-30527 Incorrect Permission Assignment for Critical Resource vulnerability in Siemens Sinec NMS 1.0/1.0.3
A vulnerability has been identified in SINEC NMS (All versions < V2.0).
local
low complexity
siemens CWE-732
7.8
2023-10-10 CVE-2023-30900 Stack-based Buffer Overflow vulnerability in Siemens Xpedition Layout Browser
A vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14).
local
low complexity
siemens CWE-121
7.8
2023-10-10 CVE-2023-35796 Cross-site Scripting vulnerability in Siemens Sinema Server 14.0
A vulnerability has been identified in SINEMA Server V14 (All versions).
network
low complexity
siemens CWE-79
critical
9.0
2023-10-10 CVE-2023-36380 Use of Hard-coded Credentials vulnerability in Siemens Cp-8031 Firmware and Cp-8050 Firmware
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)).
local
low complexity
siemens CWE-798
7.8
2023-10-10 CVE-2023-37194 Improper Access Control vulnerability in Siemens products
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions).
local
low complexity
siemens CWE-284
6.7
2023-10-10 CVE-2023-37195 Resource Exhaustion vulnerability in Siemens products
A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATIC CP 1626 (All versions), SIMATIC CP 1628 (All versions).
local
low complexity
siemens CWE-400
4.4
2023-10-10 CVE-2023-38640 Incorrect Permission Assignment for Critical Resource vulnerability in Siemens Sicam Pas/Pqs
A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22).
local
low complexity
siemens CWE-732
4.4
2023-10-10 CVE-2023-42796 Path Traversal vulnerability in Siemens Cp-8031 Firmware and Cp-8050 Firmware
A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V05.11).
network
low complexity
siemens CWE-22
8.8
2023-10-10 CVE-2023-43625 Code Injection vulnerability in Siemens Simcenter Amesim
A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1).
network
low complexity
siemens CWE-94
critical
9.8
2023-10-10 CVE-2023-44081 Out-of-bounds Write vulnerability in Siemens Tecnomatix
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003).
local
low complexity
siemens CWE-787
7.8