Vulnerabilities > Siemens > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-08-02 CVE-2024-38879 Unspecified vulnerability in Siemens Omnivise T3000 Application Server 8.2/9.2
A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (All versions), Omnivise T3000 R8.2 SP4 (All versions).
network
low complexity
siemens
critical
9.8
2024-07-09 CVE-2024-39872 Unspecified vulnerability in Siemens Sinema Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).
network
low complexity
siemens
critical
9.9
2024-03-12 CVE-2022-32257 Improper Access Control vulnerability in Siemens Sinema Remote Connect Server
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2).
network
low complexity
siemens CWE-284
critical
9.8
2024-03-12 CVE-2024-22039 Classic Buffer Overflow vulnerability in Siemens products
A vulnerability has been identified in Cerberus PRO EN Engineering Tool (All versions < IP8), Cerberus PRO EN Fire Panel FC72x IP6 (All versions < IP6 SR3), Cerberus PRO EN Fire Panel FC72x IP7 (All versions < IP7 SR5), Cerberus PRO EN X200 Cloud Distribution IP7 (All versions < V3.0.6602), Cerberus PRO EN X200 Cloud Distribution IP8 (All versions < V4.0.5016), Cerberus PRO EN X300 Cloud Distribution IP7 (All versions < V3.2.6601), Cerberus PRO EN X300 Cloud Distribution IP8 (All versions < V4.2.5015), Cerberus PRO UL Compact Panel FC922/924 (All versions < MP4), Cerberus PRO UL Engineering Tool (All versions < MP4), Cerberus PRO UL X300 Cloud Distribution (All versions < V4.3.0001), Desigo Fire Safety UL Compact Panel FC2025/2050 (All versions < MP4), Desigo Fire Safety UL Engineering Tool (All versions < MP4), Desigo Fire Safety UL X300 Cloud Distribution (All versions < V4.3.0001), Sinteso FS20 EN Engineering Tool (All versions < MP8), Sinteso FS20 EN Fire Panel FC20 MP6 (All versions < MP6 SR3), Sinteso FS20 EN Fire Panel FC20 MP7 (All versions < MP7 SR5), Sinteso FS20 EN X200 Cloud Distribution MP7 (All versions < V3.0.6602), Sinteso FS20 EN X200 Cloud Distribution MP8 (All versions < V4.0.5016), Sinteso FS20 EN X300 Cloud Distribution MP7 (All versions < V3.2.6601), Sinteso FS20 EN X300 Cloud Distribution MP8 (All versions < V4.2.5015), Sinteso Mobile (All versions < V3.0.0).
network
low complexity
siemens CWE-120
critical
9.8
2024-02-13 CVE-2024-23810 SQL Injection vulnerability in Siemens Sinec NMS 1.0/1.0.3/2.0
A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP1).
network
low complexity
siemens CWE-89
critical
9.8
2024-02-13 CVE-2024-23813 Improper Authentication vulnerability in Siemens Polarion ALM 21.0/2304.0
A vulnerability has been identified in Polarion ALM (All versions < V2404.0).
network
low complexity
siemens CWE-287
critical
9.8
2024-02-13 CVE-2024-23816 Use of Hard-coded Credentials vulnerability in Siemens Location Intelligence
A vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0) (All versions < V4.3), Location Intelligence Perpetual Medium (9DE5110-8CA12-1AX0) (All versions < V4.3), Location Intelligence Perpetual Non-Prod (9DE5110-8CA10-1AX0) (All versions < V4.3), Location Intelligence Perpetual Small (9DE5110-8CA11-1AX0) (All versions < V4.3), Location Intelligence SUS Large (9DE5110-8CA13-1BX0) (All versions < V4.3), Location Intelligence SUS Medium (9DE5110-8CA12-1BX0) (All versions < V4.3), Location Intelligence SUS Non-Prod (9DE5110-8CA10-1BX0) (All versions < V4.3), Location Intelligence SUS Small (9DE5110-8CA11-1BX0) (All versions < V4.3).
network
low complexity
siemens CWE-798
critical
9.8
2024-01-09 CVE-2023-49251 Authorization Bypass Through User-Controlled Key vulnerability in Siemens Simatic CN 4100 2.5
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).
network
low complexity
siemens CWE-639
critical
9.8
2024-01-09 CVE-2023-49621 Unspecified vulnerability in Siemens Simatic CN 4100 2.5
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).
network
low complexity
siemens
critical
9.8
2023-12-12 CVE-2023-48427 Improper Certificate Validation vulnerability in Siemens Sinec INS 1.0
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2).
network
low complexity
siemens CWE-295
critical
9.8