Vulnerabilities > Siemens > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-25 CVE-2018-4836 Unspecified vulnerability in Siemens Telecontrol Server Basic 3.0
A vulnerability has been identified in TeleControl Server Basic < V3.1.
network
low complexity
siemens
8.8
2017-12-26 CVE-2017-12741 Unspecified vulnerability in Siemens products
Specially crafted packets sent to port 161/udp could cause a denial of service condition.
network
low complexity
siemens
7.5
2017-12-26 CVE-2017-12736 Improper Initialization vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0.1), RUGGEDCOM ROS for all other devices (All versions < ROS V4.3.4), SCALANCE XB-200/XC-200/XP-200/XR300-WG (All versions between V3.0 (including) and V3.0.2 (excluding)), SCALANCE XR-500/XM-400 (All versions between V6.1 (including) and V6.1.1 (excluding)).
low complexity
siemens CWE-665
8.8
2017-11-21 CVE-2017-5712 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with remote Admin access to the system to execute arbitrary code with AMT execution privilege.
network
low complexity
intel asus siemens CWE-119
7.2
2017-11-21 CVE-2017-5711 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to execute arbitrary code with AMT execution privilege.
local
low complexity
intel asus siemens CWE-119
7.8
2017-10-23 CVE-2017-9946 Improper Authentication vulnerability in Siemens products
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5.
network
low complexity
siemens CWE-287
7.5
2017-08-30 CVE-2017-12735 Unspecified vulnerability in Siemens Logo! 8 BM Firmware
A vulnerability has been identified in LOGO! 8 BM (incl.
network
high complexity
siemens
7.4
2017-08-30 CVE-2017-12734 Unspecified vulnerability in Siemens Logo!8 BM Fs-05 Firmware 1.81.1
A vulnerability has been identified in LOGO! 8 BM (incl.
network
low complexity
siemens
7.5
2017-08-30 CVE-2017-12069 XXE vulnerability in multiple products
An XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21 and Local Discovery Server (LDS) before 1.03.367.
network
low complexity
siemens ocpfoundation CWE-611
8.2
2017-08-08 CVE-2017-9942 Unspecified vulnerability in Siemens Sipass Integrated 2.65
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass integrated client to potentially obtain credentials from the systems.
local
low complexity
siemens
7.8