Vulnerabilities > Siemens > Low

DATE CVE VULNERABILITY TITLE RISK
2022-04-12 CVE-2022-28329 Improper Input Validation vulnerability in Siemens products
A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALANCE W1788-2 M12 (All versions < V3.0.0), SCALANCE W1788-2IA M12 (All versions < V3.0.0).
low complexity
siemens CWE-20
3.3
2022-01-11 CVE-2021-37196 Path Traversal vulnerability in Siemens Comos
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.3 (All versions >= V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used).
network
siemens CWE-22
3.5
2022-01-11 CVE-2021-37195 Cross-site Scripting vulnerability in Siemens Comos
A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 only if web components are used), COMOS V10.4 (All versions < V10.4.1 only if web components are used).
network
high complexity
siemens CWE-79
2.6
2021-12-14 CVE-2021-44444 Out-of-bounds Read vulnerability in Siemens JT Open Toolkit and JT Utilities
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0).
local
low complexity
siemens CWE-125
3.3
2021-12-14 CVE-2021-42023 Insufficiently Protected Credentials vulnerability in Siemens Modelsim and Questa
A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions).
local
low complexity
siemens CWE-522
2.1
2021-12-14 CVE-2021-42022 Path Traversal vulnerability in Siemens Simatic Easie PCS 7 Skill 20.07/21.00
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3).
network
siemens CWE-22
3.5
2021-11-14 CVE-2021-41057 Link Following vulnerability in multiple products
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.
local
low complexity
wibu siemens CWE-59
3.6
2021-11-09 CVE-2021-40364 Information Exposure Through Log Files vulnerability in Siemens Simatic PCS 7 and Simatic Wincc
A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC04), SIMATIC PCS 7 V9.1 (All versions < V9.1 SP1), SIMATIC WinCC V15 and earlier (All versions < V15 SP1 Update 7), SIMATIC WinCC V16 (All versions < V16 Update 5), SIMATIC WinCC V17 (All versions < V17 Update 2), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Update 19), SIMATIC WinCC V7.5 (All versions < V7.5 SP2 Update 5).
local
low complexity
siemens CWE-532
2.1
2021-11-09 CVE-2020-10054 Unspecified vulnerability in Siemens Simatic Rtls Locating Manager 2.10/2.10.2/2.9.3
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12).
local
low complexity
siemens
2.1
2021-11-09 CVE-2020-10053 Cleartext Storage of Sensitive Information vulnerability in Siemens Simatic Rtls Locating Manager 2.10/2.10.2/2.9.3
A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.12).
local
low complexity
siemens CWE-312
2.1