Vulnerabilities > Siemens > High

DATE CVE VULNERABILITY TITLE RISK
2020-11-12 CVE-2020-0590 Improper Input Validation vulnerability in multiple products
Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel netapp siemens CWE-20
7.8
2020-10-22 CVE-2019-17007 Improper Certificate Validation vulnerability in multiple products
In Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS to crash, resulting in a denial of service.
network
low complexity
mozilla siemens CWE-295
7.5
2020-10-15 CVE-2020-7591 Unspecified vulnerability in Siemens Siport MP 2.2/3.0.3/3.1.4
A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).
network
low complexity
siemens
8.8
2020-09-09 CVE-2020-15789 Cross-Site Request Forgery (CSRF) vulnerability in Siemens Polarion Subversion Webclient
A vulnerability has been identified in Polarion Subversion Webclient (All versions).
network
low complexity
siemens CWE-352
8.1
2020-09-09 CVE-2020-10056 Unspecified vulnerability in Siemens License Management Utility 2.3.745
A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4).
local
low complexity
siemens
7.8
2020-09-09 CVE-2020-10051 Unquoted Search Path or Element vulnerability in Siemens Simatic Rtls Locating Manager 2.10/2.9.3
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).
local
low complexity
siemens CWE-428
7.8
2020-09-09 CVE-2020-10050 Incorrect Default Permissions vulnerability in Siemens Simatic Rtls Locating Manager 2.10/2.9.3
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).
local
low complexity
siemens CWE-276
7.8
2020-09-09 CVE-2020-10049 Incorrect Default Permissions vulnerability in Siemens Simatic Rtls Locating Manager 2.10/2.9.3
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2).
local
low complexity
siemens CWE-276
7.3
2020-08-14 CVE-2020-7583 Incorrect Authorization vulnerability in Siemens Automation License Manager
A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8).
local
low complexity
siemens CWE-863
7.8
2020-07-14 CVE-2020-7587 Unspecified vulnerability in Siemens products
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcenter Intelligence (All versions < V3.3), Opcenter Quality (All versions < V11.3), Opcenter RD&L (V8.0), SIMATIC IT LMS (All versions < V2.6), SIMATIC IT Production Suite (All versions < V8.0), SIMATIC Notifier Server for Windows (All versions), SIMATIC PCS neo (All versions < V3.0 SP1), SIMATIC STEP 7 (TIA Portal) V15 (All versions < V15.1 Update 5), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 2), SIMOCODE ES V15.1 (All versions < V15.1 Update 4), SIMOCODE ES V16 (All versions < V16 Update 1), Soft Starter ES V15.1 (All versions < V15.1 Update 3), Soft Starter ES V16 (All versions < V16 Update 1).
network
low complexity
siemens
8.2