Vulnerabilities > Siemens > High

DATE CVE VULNERABILITY TITLE RISK
2021-10-12 CVE-2021-33736 Unspecified vulnerability in Siemens Sinec NMS 1.0
A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1).
network
low complexity
siemens
7.2
2021-10-12 CVE-2021-37199 Out-of-bounds Write vulnerability in Siemens Sinumerik 808D Firmware and Sinumerik 828D Firmware
A vulnerability has been identified in SINUMERIK 808D (All versions), SINUMERIK 828D (All versions < V4.95).
network
low complexity
siemens CWE-787
7.5
2021-10-12 CVE-2021-41546 Allocation of Resources Without Limits or Throttling vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.14.1), RUGGEDCOM ROX RX1400 (All versions < V2.14.1), RUGGEDCOM ROX RX1500 (All versions < V2.14.1), RUGGEDCOM ROX RX1501 (All versions < V2.14.1), RUGGEDCOM ROX RX1510 (All versions < V2.14.1), RUGGEDCOM ROX RX1511 (All versions < V2.14.1), RUGGEDCOM ROX RX1512 (All versions < V2.14.1), RUGGEDCOM ROX RX1524 (All versions < V2.14.1), RUGGEDCOM ROX RX1536 (All versions < V2.14.1), RUGGEDCOM ROX RX5000 (All versions < V2.14.1).
network
low complexity
siemens CWE-770
7.5
2021-10-01 CVE-2021-33626 Inclusion of Functionality from Untrusted Control Sphere vulnerability in multiple products
A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer).
local
low complexity
insyde siemens CWE-829
7.8
2021-09-29 CVE-2021-22946 Cleartext Transmission of Sensitive Information vulnerability in multiple products
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl).
7.5
2021-09-28 CVE-2021-41535 Unspecified vulnerability in Siemens products
A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8).
local
low complexity
siemens
7.8
2021-09-28 CVE-2021-41536 Unspecified vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8).
local
low complexity
siemens
7.8
2021-09-28 CVE-2021-41537 Use After Free vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8).
local
low complexity
siemens CWE-416
7.8
2021-09-28 CVE-2021-41539 Unspecified vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8).
local
low complexity
siemens
7.8
2021-09-28 CVE-2021-41540 Unspecified vulnerability in Siemens Solid Edge Se2020/Se2021
A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8).
local
low complexity
siemens
7.8