Vulnerabilities > Siemens

DATE CVE VULNERABILITY TITLE RISK
2021-03-15 CVE-2021-25673 Unspecified vulnerability in Siemens Simatic S7-Plcsim
A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions).
local
low complexity
siemens
5.5
2021-03-15 CVE-2021-25667 Unspecified vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2).
low complexity
siemens
8.8
2021-03-15 CVE-2020-28387 Unspecified vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3).
local
low complexity
siemens
5.5
2021-03-15 CVE-2020-28385 Out-of-bounds Write vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4).
local
low complexity
siemens CWE-787
7.8
2021-03-15 CVE-2020-25241 Improper Validation of Array Index vulnerability in Siemens products
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6).
network
low complexity
siemens CWE-129
7.5
2021-03-15 CVE-2020-25240 Unspecified vulnerability in Siemens Sinema Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0).
network
low complexity
siemens
8.8
2021-03-15 CVE-2020-25239 Unspecified vulnerability in Siemens Sinema Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0).
network
low complexity
siemens
8.8
2021-03-12 CVE-2021-27290 ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service.
network
low complexity
ssri-project oracle siemens
7.5
2021-03-11 CVE-2016-20009 Out-of-bounds Write vulnerability in multiple products
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7.
network
low complexity
windriver siemens CWE-787
critical
9.8
2021-03-10 CVE-2020-27632 Unspecified vulnerability in Siemens Simatic Mv420 Firmware and Simatic Mv440 Firmware
In SIMATIC MV400 family versions prior to v7.0.6, the ISN generator is initialized with a constant value and has constant increments.
network
low complexity
siemens
7.5