ByteOS Network

Vulnerability Details :

CVE-2019-12262

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-14 Aug, 2019 | 19:18

Updated At-04 Aug, 2024 | 23:17

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:14 Aug, 2019 | 19:18

Updated At:04 Aug, 2024 | 23:17

▼CVE Numbering Authority (CNA)

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262	x_refsource_CONFIRM
https://support.f5.com/csp/article/K41190253	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf	x_refsource_CONFIRM

Hyperlink: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Resource:

x_refsource_CONFIRM

Hyperlink: https://support.f5.com/csp/article/K41190253

Resource:

x_refsource_CONFIRM

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Resource:

x_refsource_CONFIRM

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262	x_refsource_CONFIRM x_transferred
https://support.f5.com/csp/article/K41190253	x_refsource_CONFIRM x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf	x_refsource_CONFIRM x_transferred
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf	x_refsource_CONFIRM x_transferred

Hyperlink: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://support.f5.com/csp/article/K41190253

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:14 Aug, 2019 | 20:15

Updated At:16 Jun, 2022 | 18:10

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

windriver>>vxworks>>6.6

cpe:2.3:o:windriver:vxworks:6.6:*:*:*:*:*:*:*

windriver>>vxworks>>6.7

cpe:2.3:o:windriver:vxworks:6.7:*:*:*:*:*:*:*

windriver>>vxworks>>6.8

cpe:2.3:o:windriver:vxworks:6.8:*:*:*:*:*:*:*

windriver>>vxworks>>6.9

cpe:2.3:o:windriver:vxworks:6.9:*:*:*:*:*:*:*

windriver>>vxworks>>7.0

cpe:2.3:o:windriver:vxworks:7.0:*:*:*:*:*:*:*

belden>>hirschmann_hios>>Versions up to 07.0.07(inclusive)

cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

belden>>hirschmann_ees20>>-

cpe:2.3:h:belden:hirschmann_ees20:-:*:*:*:*:*:*:*

belden>>hirschmann_ees25>>-

cpe:2.3:h:belden:hirschmann_ees25:-:*:*:*:*:*:*:*

belden>>hirschmann_eesx20>>-

cpe:2.3:h:belden:hirschmann_eesx20:-:*:*:*:*:*:*:*

belden>>hirschmann_eesx30>>-

cpe:2.3:h:belden:hirschmann_eesx30:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1020>>-

cpe:2.3:h:belden:hirschmann_grs1020:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1030>>-

cpe:2.3:h:belden:hirschmann_grs1030:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1042>>-

cpe:2.3:h:belden:hirschmann_grs1042:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1120>>-

cpe:2.3:h:belden:hirschmann_grs1120:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1130>>-

cpe:2.3:h:belden:hirschmann_grs1130:-:*:*:*:*:*:*:*

belden>>hirschmann_grs1142>>-

cpe:2.3:h:belden:hirschmann_grs1142:-:*:*:*:*:*:*:*

belden>>hirschmann_msp30>>-

cpe:2.3:h:belden:hirschmann_msp30:-:*:*:*:*:*:*:*

belden>>hirschmann_msp32>>-

cpe:2.3:h:belden:hirschmann_msp32:-:*:*:*:*:*:*:*

belden>>hirschmann_rail_switch_power_lite>>-

cpe:2.3:h:belden:hirschmann_rail_switch_power_lite:-:*:*:*:*:*:*:*

belden>>hirschmann_rail_switch_power_smart>>-

cpe:2.3:h:belden:hirschmann_rail_switch_power_smart:-:*:*:*:*:*:*:*

belden>>hirschmann_red25>>-

cpe:2.3:h:belden:hirschmann_red25:-:*:*:*:*:*:*:*

belden>>hirschmann_rsp20>>-

cpe:2.3:h:belden:hirschmann_rsp20:-:*:*:*:*:*:*:*

belden>>hirschmann_rsp25>>-

cpe:2.3:h:belden:hirschmann_rsp25:-:*:*:*:*:*:*:*

belden>>hirschmann_rsp30>>-

cpe:2.3:h:belden:hirschmann_rsp30:-:*:*:*:*:*:*:*

belden>>hirschmann_rsp35>>-

cpe:2.3:h:belden:hirschmann_rsp35:-:*:*:*:*:*:*:*

belden>>hirschmann_rspe30>>-

cpe:2.3:h:belden:hirschmann_rspe30:-:*:*:*:*:*:*:*

belden>>hirschmann_rspe32>>-

cpe:2.3:h:belden:hirschmann_rspe32:-:*:*:*:*:*:*:*

belden>>hirschmann_rspe35>>-

cpe:2.3:h:belden:hirschmann_rspe35:-:*:*:*:*:*:*:*

belden>>hirschmann_rspe37>>-

cpe:2.3:h:belden:hirschmann_rspe37:-:*:*:*:*:*:*:*

belden>>hirschmann_hios>>Versions up to 07.5.01(inclusive)

cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

belden>>hirschmann_msp40>>-

cpe:2.3:h:belden:hirschmann_msp40:-:*:*:*:*:*:*:*

belden>>hirschmann_octopus_os3>>-

cpe:2.3:h:belden:hirschmann_octopus_os3:-:*:*:*:*:*:*:*

belden>>hirschmann_hios>>Versions up to 07.2.04(inclusive)

cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

belden>>hirschmann_dragon_mach4000>>-

cpe:2.3:h:belden:hirschmann_dragon_mach4000:-:*:*:*:*:*:*:*

belden>>hirschmann_dragon_mach4500>>-

cpe:2.3:h:belden:hirschmann_dragon_mach4500:-:*:*:*:*:*:*:*

belden>>hirschmann_hios>>Versions up to 05.3.06(inclusive)

cpe:2.3:o:belden:hirschmann_hios:*:*:*:*:*:*:*:*

belden>>hirschmann_eagle_one>>-

cpe:2.3:h:belden:hirschmann_eagle_one:-:*:*:*:*:*:*:*

belden>>hirschmann_eagle20>>-

cpe:2.3:h:belden:hirschmann_eagle20:-:*:*:*:*:*:*:*

belden>>hirschmann_eagle30>>-

cpe:2.3:h:belden:hirschmann_eagle30:-:*:*:*:*:*:*:*

belden>>garrettcom_magnum_dx940e_firmware>>Versions up to 1.0.1_y7(inclusive)

cpe:2.3:o:belden:garrettcom_magnum_dx940e_firmware:*:*:*:*:*:*:*:*

belden>>garrettcom_magnum_dx940e>>-

cpe:2.3:h:belden:garrettcom_magnum_dx940e:-:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7000_firmware>>Versions before bs5.2.461.17(exclusive)

cpe:2.3:o:siemens:ruggedcom_win7000_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7000>>-

cpe:2.3:h:siemens:ruggedcom_win7000:-:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7018_firmware>>Versions before bs5.2.461.17(exclusive)

cpe:2.3:o:siemens:ruggedcom_win7018_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7018>>-

cpe:2.3:h:siemens:ruggedcom_win7018:-:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7025_firmware>>Versions before bs5.2.461.17(exclusive)

cpe:2.3:o:siemens:ruggedcom_win7025_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7025>>-

cpe:2.3:h:siemens:ruggedcom_win7025:-:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7200_firmware>>Versions before bs5.2.461.17(exclusive)

cpe:2.3:o:siemens:ruggedcom_win7200_firmware:*:*:*:*:*:*:*:*

Siemens AG

>>ruggedcom_win7200>>-

cpe:2.3:h:siemens:ruggedcom_win7200:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf	cve@mitre.org	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf	cve@mitre.org	Third Party Advisory
https://support.f5.com/csp/article/K41190253	cve@mitre.org	Third Party Advisory
https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262	cve@mitre.org	Vendor Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://support.f5.com/csp/article/K41190253

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12262

Source: cve@mitre.org

Resource:

Vendor Advisory

Similar CVEs

215Records found

CVE-2019-12815

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-76.47% / 98.96%

7 Day CHG-2.04%

Published-19 Jul, 2019 | 22:56

Updated-04 Nov, 2025 | 16:15

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.

Vendor-proftpd n/a Fedora Project Siemens AG Debian GNU/Linux

Product-simatic_cp_1543-1 debian_linux proftpd fedora simatic_cp_1543-1_firmware n/a

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2025-40795

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.37% / 59.61%

7 Day CHG~0.00%

Published-09 Sep, 2025 | 08:48

Updated-09 Jun, 2026 | 10:16

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User Management Component (UMC) (All versions < V2.15.1.3). Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC component. This could allow an unauthenticated remote attacker to execute arbitrary code or to cause a denial of service condition.

Vendor-Siemens AG

Product-user_management_component simatic_pcs_neo SIMATIC PCS neo V5.0 SIMATIC PCS neo V6.0 SIMATIC PCS neo V4.1 User Management Component (UMC)

CWE ID-CWE-121

Stack-based Buffer Overflow

CVE-2025-40765

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.12% / 31.25%

7 Day CHG~0.00%

Published-14 Oct, 2025 | 09:15

Updated-21 Oct, 2025 | 14:40

A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3). The affected application contains an information disclosure vulnerability. This could allow an unauthenticated remote attacker to obtain password hashes of users and to login to and perform authenticated operations of the database service.

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic V3.1

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-40736

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.48% / 65.62%

7 Day CHG~0.00%

Published-08 Jul, 2025 | 10:34

Updated-21 Aug, 2025 | 15:10

A vulnerability has been identified in SINEC NMS (All versions < V4.0). The affected application exposes an endpoint that allows an unauthorized modification of administrative credentials. This could allow an unauthenticated attacker to reset the superadmin password and gain full control of the application (ZDI-CAN-26569).

Vendor-Siemens AG

Product-sinec_nms SINEC NMS

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2021-42019

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-5.9||MEDIUM

EPSS-0.56% / 68.69%

7 Day CHG~0.00%

Published-08 Mar, 2022 | 11:31

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. Within a third-party component, the process to allocate partition size fails to check memory boundaries. Therefore, if a large amount is requested by an attacker, due to an integer-wrap around, it could result in a small size being allocated instead.

Vendor-Siemens AG

Product-ruggedcom_rs969 ruggedcom_rs910 ruggedcom_rsg2100 ruggedcom_rsg2300p ruggedcom_rs930l ruggedcom_rsg907r ruggedcom_rsg910c ruggedcom_rs416 ruggedcom_rs900w ruggedcom_i801 ruggedcom_ros ruggedcom_m2100 ruggedcom_rmc ruggedcom_i800 ruggedcom_rst2228 ruggedcom_rs930w ruggedcom_rmc8388 ruggedcom_rsg2200 ruggedcom_rs900 ruggedcom_rs401 ruggedcom_rs8000t ruggedcom_rsg909r ruggedcom_rp110 ruggedcom_rs910l ruggedcom_i802 ruggedcom_m969 ruggedcom_rs910w ruggedcom_rsg2100p ruggedcom_rs8000 ruggedcom_rst916p ruggedcom_rs900gp ruggedcom_rs900l ruggedcom_rmc40 ruggedcom_rsl910 ruggedcom_rmc41 ruggedcom_rsg920p ruggedcom_rs920w ruggedcom_rs416v2 ruggedcom_rs8000a ruggedcom_rsg2300 ruggedcom_rst916c ruggedcom_m2200 ruggedcom_rs400 ruggedcom_rst2228p ruggedcom_rmc20 ruggedcom_rs8000h ruggedcom_rsg908c ruggedcom_i803 ruggedcom_rsg2488 ruggedcom_rs900g ruggedcom_rsg2288 ruggedcom_rs920l ruggedcom_rs940g ruggedcom_rmc30 RUGGEDCOM RS8000 RUGGEDCOM RS900L RUGGEDCOM RSG2300 V4.X RUGGEDCOM RS900MNC-STND-XX-C01 RUGGEDCOM RSG920P V4.X RUGGEDCOM RS401NC RUGGEDCOM RSG2100PNC (32M) V4.X RUGGEDCOM RS920LNC RUGGEDCOM RS910L RUGGEDCOM RS930W RUGGEDCOM RSG2100NC(32M) V5.X RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RSG2288NC V5.X RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RS1600 RUGGEDCOM i801NC RUGGEDCOM RS940G RUGGEDCOM RSG2100NC(32M) V4.X RUGGEDCOM i800NC RUGGEDCOM RS910 RUGGEDCOM RSG908C RUGGEDCOM RS8000NC RUGGEDCOM RS400F RUGGEDCOM RS900NC(32M) V4.X RUGGEDCOM RS920L RUGGEDCOM RMC8388 V4.X RUGGEDCOM RS8000H RUGGEDCOM RS900LNC RUGGEDCOM RS8000T RUGGEDCOM RS910NC RUGGEDCOM RS416PF RUGGEDCOM RS900G RUGGEDCOM M2100F RUGGEDCOM RS900M-STND-XX RUGGEDCOM RS900W RUGGEDCOM RMC8388 V5.X RUGGEDCOM RS900MNC-STND-XX RUGGEDCOM RSG2100PNC (32M) V5.X RUGGEDCOM RSG910C RUGGEDCOM RSG2300PF RUGGEDCOM RSG2288 V4.X RUGGEDCOM RS1600NC RUGGEDCOM RS969 RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM RSG909R RUGGEDCOM RS416F RUGGEDCOM RS900GPF RUGGEDCOM RSG2100P RUGGEDCOM RS930LNC RUGGEDCOM RS416P RUGGEDCOM RSG920P V5.X RUGGEDCOM RSG2200NC RUGGEDCOM RS8000HNC RUGGEDCOM RSG2300PNC V5.X RUGGEDCOM RSG2288 V5.X RUGGEDCOM RS1600F RUGGEDCOM RS416NC RUGGEDCOM RS930L RUGGEDCOM RSG907R RUGGEDCOM RSG2300P V5.X RUGGEDCOM RS910W RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS940GNC RUGGEDCOM RS900GNC RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RMC8388NC V5.X RUGGEDCOM RS940GF RUGGEDCOM RS910LNC RUGGEDCOM RSG2288NC V4.X RUGGEDCOM RSG2488 V5.X RUGGEDCOM RMC30 RUGGEDCOM RS900GF RUGGEDCOM RS8000ANC RUGGEDCOM RMC8388NC V4.X RUGGEDCOM RS1600T RUGGEDCOM M969F RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RS400NC RUGGEDCOM RS900MNC-GETS-C01 RUGGEDCOM RS900M-GETS-C01 RUGGEDCOM RSG2488NC V4.X RUGGEDCOM M2200F RUGGEDCOM RP110 RUGGEDCOM i801 RUGGEDCOM RS416v2 V4.X RUGGEDCOM RS416NCv2 V4.X RUGGEDCOM RS8000TNC RUGGEDCOM RSG2300P V4.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS920W RUGGEDCOM RS900F RUGGEDCOM M2200 RUGGEDCOM RS900MNC-GETS-XX RUGGEDCOM RSG2300NC V5.X RUGGEDCOM RS900GNC(32M) V4.X RUGGEDCOM RS900 RUGGEDCOM RSG2100 RUGGEDCOM M969NC RUGGEDCOM RS416PNC RUGGEDCOM RS1600FNC RUGGEDCOM RS400 RUGGEDCOM RS900NC(32M) V5.X RUGGEDCOM RS1600TNC RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM M969 RUGGEDCOM RS416PNCv2 V4.X RUGGEDCOM M2200NC RUGGEDCOM RS8000A RUGGEDCOM i803 RUGGEDCOM RSG2100PNC RUGGEDCOM RSG920PNC V5.X RUGGEDCOM RSG2100NC RUGGEDCOM RSG2488F RUGGEDCOM RP110NC RUGGEDCOM RSG2200 RUGGEDCOM RSG2488NC V5.X RUGGEDCOM RSL910NC RUGGEDCOM RS969NC RUGGEDCOM RS416 RUGGEDCOM RST2228P RUGGEDCOM i800 RUGGEDCOM RS900M-STND-C01 RUGGEDCOM RS900M-GETS-XX RUGGEDCOM RST916P RUGGEDCOM RS416PNCv2 V5.X RUGGEDCOM RS416NCv2 V5.X RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RSL910 RUGGEDCOM RSG2100PF RUGGEDCOM RS900GP RUGGEDCOM RST916C RUGGEDCOM RS900GPNC RUGGEDCOM RSG2100F RUGGEDCOM RSG2488 V4.X RUGGEDCOM i802 RUGGEDCOM RS900GNC(32M) V5.X RUGGEDCOM RST2228 RUGGEDCOM RS401 RUGGEDCOM RSG2300NC V4.X RUGGEDCOM RSG920PNC V4.X RUGGEDCOM i802NC RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM RSG2300F RUGGEDCOM RSG2300PNC V4.X RUGGEDCOM RS900NC RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RMC30NC RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RSG2200F RUGGEDCOM M2100NC RUGGEDCOM RSG2100P (32M) V5.X

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2021-42018

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-5.9||MEDIUM

EPSS-0.33% / 56.17%

7 Day CHG~0.00%

Published-08 Mar, 2022 | 11:31

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. Within a third-party component, whenever memory allocation is requested, the out of bound size is not checked. Therefore, if size exceeding the expected allocation is assigned, it could allocate a smaller buffer instead. If an attacker were to exploit this, they could cause a heap overflow.

Vendor-Siemens AG

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-37184

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.52% / 67.23%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the password of any user in the system under certain circumstances. With this an attacker could impersonate any valid user on an affected system.

Vendor-Siemens AG

Product-industrial_edge_management Industrial Edge Management

CWE ID-CWE-639

Authorization Bypass Through User-Controlled Key

CVE-2018-7084

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

View Details

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-9.8||CRITICAL

EPSS-24.80% / 96.28%

7 Day CHG~0.00%

Published-10 May, 2019 | 17:14

Updated-05 Aug, 2024 | 06:17

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1

Vendor-n/a Siemens AG Aruba Networks

Product-aruba_instant scalance_w1750d_firmware scalance_w1750d Aruba Instant (IAP)

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2021-37716

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

View Details

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-9.8||CRITICAL

EPSS-1.66% / 82.53%

7 Day CHG~0.00%

Published-07 Sep, 2021 | 12:02

Updated-04 Aug, 2024 | 01:23

A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.

Vendor-n/a Siemens AG Aruba Networks

Product-arubaos sd-wan scalance_w1750d_firmware scalance_w1750d Aruba SD-WAN Software and Gateways; Aruba Operating System Software

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-4841

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-3.52% / 87.95%

7 Day CHG~0.00%

Published-29 Mar, 2018 | 13:00

Updated-17 Sep, 2024 | 03:02

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1). A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read and manipulate data as well as configuration settings of the affected device. At the stage of publishing this security advisory no public exploitation is known. Siemens provides mitigations to resolve it.

Vendor-Siemens AG

Product-tim_1531_irc_firmware tim_1531_irc TIM 1531 IRC

CWE ID-CWE-303

Incorrect Implementation of Authentication Algorithm

CWE ID-CWE-287

Improper Authentication

CVE-2018-4852

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-1.61% / 82.23%

7 Day CHG~0.00%

Published-03 Jul, 2018 | 14:00

Updated-17 Sep, 2024 | 03:07

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device could potentially circumvent the authentication mechanism if he/she is able to obtain certain knowledge specific to the attacked device.

Vendor-Siemens AG

Product-siclock_tc400 siclock_tc400_firmware siclock_tc100_firmware siclock_tc100 SICLOCK TC100, SICLOCK TC400

CWE ID-CWE-288

Authentication Bypass Using an Alternate Path or Channel

CWE ID-CWE-287

Improper Authentication

CVE-2018-3991

Matching Score-8

Assigner-Talos

View Details

Matching Score-8

Assigner-Talos

CVSS Score-10||CRITICAL

EPSS-79.31% / 99.10%

7 Day CHG~0.00%

Published-05 Feb, 2019 | 22:00

Updated-05 Aug, 2024 | 04:57

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.

Vendor-wibu n/a Siemens AG Microsoft Corporation

Product-windows wibukey simatic_wincc_open_architecture n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2007-1915

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-4.96% / 89.93%

7 Day CHG~0.00%

Published-10 Apr, 2007 | 23:00

Updated-23 Apr, 2026 | 00:35

Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.

Vendor-n/a Apple Inc.IBM Corporation SAP SE Siemens AG Linux Kernel Organization, Inc HP Inc.Microsoft Corporation

Product-hp-ux rfc_library racf aix macos reliant_unix windows_server os_400 linux_kernel tru64 n/a

CVE-2018-20748

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-10.57% / 93.47%

7 Day CHG~0.00%

Published-30 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 12:12

LibVNC before 0.9.12 contains multiple heap out-of-bounds write vulnerabilities in libvncclient/rfbproto.c. The fix for CVE-2018-20019 was incomplete.

Vendor-libvnc_project n/a Debian GNU/Linux Siemens AG Canonical Ltd.

Product-simatic_itc1500_pro_firmware ubuntu_linux debian_linux simatic_itc1500_pro simatic_itc1500 simatic_itc1900 simatic_itc1900_firmware simatic_itc1900_pro_firmware simatic_itc1500_firmware simatic_itc2200_firmware simatic_itc2200_pro simatic_itc2200_pro_firmware libvncserver simatic_itc1900_pro simatic_itc2200 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-20019

Matching Score-8

Assigner-Kaspersky

View Details

Matching Score-8

Assigner-Kaspersky

CVSS Score-9.8||CRITICAL

EPSS-16.80% / 95.12%

7 Day CHG~0.00%

Published-19 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 11:51

LibVNC before commit a83439b9fbe0f03c48eb94ed05729cb016f8b72f contains multiple heap out-of-bound write vulnerabilities in VNC client code that can result remote code execution

Vendor-libvnc_project n/a Debian GNU/Linux Siemens AG Canonical Ltd.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2007-1043

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-11.18% / 93.68%

7 Day CHG+4.32%

Published-21 Feb, 2007 | 17:00

Updated-23 Apr, 2026 | 00:35

Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php.

Vendor-ezboo windriver santa_cruz_operation n/a Apple Inc.IBM Corporation Sun Microsystems (Oracle Corporation)Linux Kernel Organization, Inc HP Inc.Microsoft Corporation

Product-windows_me mac_os_x webstats sco_unix linux_kernel windows_98 os2 tru64 bsdos hp-ux windows_98se windows_nt windows_xp solaris aix windows_2000 windows_2003_server windows_95 n/a

CVE-2018-20749

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-10.37% / 93.39%

7 Day CHG~0.00%

Published-30 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 12:12

LibVNC before 0.9.12 contains a heap out-of-bounds write vulnerability in libvncserver/rfbserver.c. The fix for CVE-2018-15127 was incomplete.

Vendor-libvnc_project n/a Debian GNU/Linux Siemens AG Canonical Ltd.

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-27539

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.07% / 22.90%

7 Day CHG+0.02%

Published-16 Apr, 2025 | 17:37

Updated-19 Aug, 2025 | 14:49

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'VerifyUser' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25914)

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2025-27540

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 17.03%

7 Day CHG~0.00%

Published-16 Apr, 2025 | 17:37

Updated-19 Aug, 2025 | 14:49

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Authenticate' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25913)

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2019-8272

Matching Score-8

Assigner-Kaspersky

View Details

Matching Score-8

Assigner-Kaspersky

CVSS Score-9.8||CRITICAL

EPSS-1.40% / 80.93%

7 Day CHG~0.00%

Published-09 Mar, 2019 | 00:00

Updated-16 Sep, 2024 | 16:43

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Vendor-uvnc Siemens AG Kaspersky Lab

Product-sinumerik_pcu_base_win10_software\/ipc ultravnc sinumerik_pcu_base_win7_software\/ipc sinumerik_access_mymachine\/p2p UltraVNC

CWE ID-CWE-193

Off-by-one Error

CVE-2018-13816

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-2.92% / 86.74%

7 Day CHG~0.00%

Published-12 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 09:14

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication on port 102/tcp, although configured. Successful exploitation requires an attacker to be able to send packets to port 102/tcp of the affected device. No user interaction and no user privileges are required to exploit the vulnerability. At the time of advisory publication no public exploitation of this vulnerability was known.

Vendor-Siemens AG

Product-tim_1531_irc_firmware tim_1531_irc TIM 1531 IRC

CWE ID-CWE-284

Improper Access Control

CWE ID-CWE-287

Improper Authentication

CVE-2006-7034

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.56% / 68.90%

7 Day CHG~0.00%

Published-23 Feb, 2007 | 01:00

Updated-23 Apr, 2026 | 00:35

SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat parameter.

Vendor-windriver super_link_exchange_script santa_cruz_operation n/a Apple Inc.IBM Corporation Sun Microsystems (Oracle Corporation)Linux Kernel Organization, Inc HP Inc.Microsoft Corporation

Product-windows_me mac_os_x sco_unix linux_kernel windows_98 os2 tru64 bsdos hp-ux windows_98se windows_nt super_link_exchange_script windows_xp solaris aix windows_2000 windows_2003_server windows_95 n/a

CVE-2025-27495

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.05% / 17.03%

7 Day CHG~0.00%

Published-16 Apr, 2025 | 17:37

Updated-19 Aug, 2025 | 14:49

A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateTrace' method. This could allow an unauthenticated remote attacker to bypass authorization controls, to read from and write to the application's database and execute code with "NT AUTHORITY\NetworkService" permissions. A successful attack requires the attacker to be able to access port 8000 on a system where a vulnerable version of the affected application is executed on. (ZDI-CAN-25911)

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2023-28489

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.70% / 86.25%

7 Day CHG~0.00%

Published-11 Apr, 2023 | 09:03

Updated-13 Feb, 2025 | 16:48

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices are vulnerable to command injection via the web server port 443/tcp, if the parameter “Remote Operation” is enabled. The parameter is disabled by default. The vulnerability could allow an unauthenticated remote attacker to perform arbitrary code execution on the device.

Vendor-Siemens AG

Product-cp-8050_firmware cp-8031 cp-8031_firmware cp-8050 CP-8031 MASTER MODULE CP-8050 MASTER MODULE

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2021-37181

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-1.10% / 78.53%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-04 Aug, 2024 | 01:16

A vulnerability has been identified in Cerberus DMS V4.0 (All versions), Cerberus DMS V4.1 (All versions), Cerberus DMS V4.2 (All versions), Cerberus DMS V5.0 (All versions < v5.0 QU1), Desigo CC Compact V4.0 (All versions), Desigo CC Compact V4.1 (All versions), Desigo CC Compact V4.2 (All versions), Desigo CC Compact V5.0 (All versions < V5.0 QU1), Desigo CC V4.0 (All versions), Desigo CC V4.1 (All versions), Desigo CC V4.2 (All versions), Desigo CC V5.0 (All versions < V5.0 QU1). The application deserialises untrusted data without sufficient validations, that could result in an arbitrary deserialization. This could allow an unauthenticated attacker to execute code in the affected system. The CCOM communication component used for Windows App / Click-Once and IE Web / XBAP client connectivity are affected by the vulnerability.

Vendor-Siemens AG

Product-cerberus_dms desigo_cc desigo_cc_compact Desigo CC V4.0 Desigo CC V4.1 Cerberus DMS V4.2 Desigo CC V5.0 Desigo CC Compact V4.2 Desigo CC Compact V5.0 Cerberus DMS V5.0 Cerberus DMS V4.0 Desigo CC V4.2 Desigo CC Compact V4.1 Desigo CC Compact V4.0 Cerberus DMS V4.1

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2025-26390

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-0.34% / 57.17%

7 Day CHG~0.00%

Published-13 May, 2025 | 09:38

Updated-03 Oct, 2025 | 20:46

A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0). The web service of affected devices is vulnerable to SQL injection when checking authentication data. This could allow an unauthenticated remote attacker to bypass the check and authenticate as Administrator user.

Vendor-Siemens AG

Product-ozw772 ozw672 ozw672_firmware ozw772_firmware OZW772 OZW672

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2025-26389

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-1.11% / 78.58%

7 Day CHG~0.00%

Published-13 May, 2025 | 09:38

Updated-06 Oct, 2025 | 10:34

A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

Product-ozw772 ozw672 ozw672_firmware ozw772_firmware OZW772 OZW672

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2025-24956

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.36% / 58.99%

7 Day CHG~0.00%

Published-11 Feb, 2025 | 10:29

Updated-24 Sep, 2025 | 00:57

A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.

Vendor-Siemens AG

Product-openv2g OpenV2G

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-23813

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-7.3||HIGH

EPSS-0.14% / 34.68%

7 Day CHG~0.00%

Published-13 Feb, 2024 | 09:00

Updated-09 May, 2025 | 18:28

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

Vendor-Siemens AG

Product-polarion_alm Polarion ALM

CWE ID-CWE-287

Improper Authentication

CVE-2023-24845

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.1||CRITICAL

EPSS-0.26% / 49.88%

7 Day CHG~0.00%

Published-08 Aug, 2023 | 09:20

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. The affected products insufficiently block data from being forwarded over the mirror port into the mirrored network. An attacker could use this behavior to transmit malicious packets to systems in the mirrored network, possibly influencing their configuration and runtime behavior.

Vendor-Siemens AG

Product-ruggedcom_rsg2488nc ruggedcom_rs969 ruggedcom_rsg2100_\(32m\)ruggedcom_rsg2100 ruggedcom_rsg2300p ruggedcom_rsg910c ruggedcom_rs416 ruggedcom_rs900_\(32m\)ruggedcom_i802nc ruggedcom_m969f ruggedcom_ros ruggedcom_m2100 ruggedcom_rs910lnc ruggedcom_rsg2300f ruggedcom_rs900mnc-stnd-xx ruggedcom_rs930w ruggedcom_rmc8388 ruggedcom_rsg2200 ruggedcom_rsg2300nc ruggedcom_rs969nc ruggedcom_rsl910nc ruggedcom_m2200f ruggedcom_rs1600 ruggedcom_rs910l ruggedcom_rsg2288nc ruggedcom_rs900m-stnd-c01 ruggedcom_m969 ruggedcom_rs900g_\(32m\)ruggedcom_rsg2200nc ruggedcom_rs900m-stnd-xx ruggedcom_rsg2100nc\(32m\)ruggedcom_m969nc ruggedcom_i801nc ruggedcom_rs900nc\(32m\)ruggedcom_rsg2300pf ruggedcom_m2100f ruggedcom_rsg2488f ruggedcom_rsl910 ruggedcom_rs900l ruggedcom_rs401nc ruggedcom_rs900lnc ruggedcom_rs900m-gets-c01 ruggedcom_rs900nc ruggedcom_rs900mnc-gets-c01 ruggedcom_rs920w ruggedcom_rs8000a ruggedcom_rs416v2 ruggedcom_rst916c ruggedcom_rsg2300 ruggedcom_rs8000anc ruggedcom_rst2228p ruggedcom_rs8000nc ruggedcom_rsg908c ruggedcom_i803 ruggedcom_rmc30nc ruggedcom_rs930lnc ruggedcom_rsg2488 ruggedcom_rs900g ruggedcom_rs416pnc_v2 ruggedcom_rs8000tnc ruggedcom_rsg2288 ruggedcom_rs900gf ruggedcom_rs940g ruggedcom_rsg920pnc ruggedcom_rsg2100f ruggedcom_rmc8388nc ruggedcom_rs910 ruggedcom_rs930l ruggedcom_rsg907r ruggedcom_rs1600tnc ruggedcom_rs900gpnc ruggedcom_rs8000hnc ruggedcom_rs900w ruggedcom_rp110nc ruggedcom_rs900gnc ruggedcom_rsg2100pnc ruggedcom_i801 ruggedcom_rs940gnc ruggedcom_rs416pnc ruggedcom_rsg2100pf ruggedcom_rs416nc ruggedcom_i800 ruggedcom_rs900mnc-gets-xx ruggedcom_rs940gf ruggedcom_rst2228 ruggedcom_i800nc ruggedcom_rsg909r ruggedcom_rs1600t ruggedcom_rs401 ruggedcom_rs900 ruggedcom_rs8000t ruggedcom_rs416pv2 ruggedcom_rs416f ruggedcom_rp110 ruggedcom_rs920lnc ruggedcom_i803nc ruggedcom_i802 ruggedcom_rs910w ruggedcom_m2200nc ruggedcom_rsg2100p ruggedcom_rs900gpf ruggedcom_rs8000 ruggedcom_rst916p ruggedcom_rs900f ruggedcom_rsg2200f ruggedcom_rs1600nc ruggedcom_rsg2100nc ruggedcom_rs900gp ruggedcom_rs900mnc-stnd-xx-c01 ruggedcom_rsg920p ruggedcom_rs416p ruggedcom_rs900m-gets-xx ruggedcom_m2100nc ruggedcom_rs1600f ruggedcom_m2200 ruggedcom_rs416nc_v2 ruggedcom_rs400 ruggedcom_rs8000h ruggedcom_rs1600fnc ruggedcom_rs416pf ruggedcom_rs400f ruggedcom_rsg2300pnc ruggedcom_rs920l ruggedcom_rs910nc ruggedcom_rs900gnc\(32m\)ruggedcom_rs400nc ruggedcom_rmc30 RUGGEDCOM RS8000 RUGGEDCOM RS900L RUGGEDCOM RSG2300 V4.X RUGGEDCOM RS900MNC-STND-XX-C01 RUGGEDCOM RSG920P V4.X RUGGEDCOM RS401NC RUGGEDCOM RSG2100PNC (32M) V4.X RUGGEDCOM RS920LNC RUGGEDCOM RS910L RUGGEDCOM RS930W RUGGEDCOM RSG2100NC(32M) V5.X RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RSG2288NC V5.X RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RS1600 RUGGEDCOM i801NC RUGGEDCOM RS940G RUGGEDCOM RSG2100NC(32M) V4.X RUGGEDCOM i800NC RUGGEDCOM RS910 RUGGEDCOM RSG908C RUGGEDCOM RS8000NC RUGGEDCOM RS400F RUGGEDCOM RS900NC(32M) V4.X RUGGEDCOM RS920L RUGGEDCOM RMC8388 V4.X RUGGEDCOM RS8000H RUGGEDCOM RS900LNC RUGGEDCOM RS8000T RUGGEDCOM RS910NC RUGGEDCOM RS416PF RUGGEDCOM RS900G RUGGEDCOM M2100F RUGGEDCOM RS900M-STND-XX RUGGEDCOM RS900W RUGGEDCOM RMC8388 V5.X RUGGEDCOM RS900MNC-STND-XX RUGGEDCOM RSG2100PNC (32M) V5.X RUGGEDCOM RSG910C RUGGEDCOM RSG2300PF RUGGEDCOM RSG2288 V4.X RUGGEDCOM RS1600NC RUGGEDCOM RS969 RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM RSG909R RUGGEDCOM RS416F RUGGEDCOM RS900GPF RUGGEDCOM RSG2100P RUGGEDCOM RS930LNC RUGGEDCOM RS416P RUGGEDCOM RSG920P V5.X RUGGEDCOM RSG2200NC RUGGEDCOM RS8000HNC RUGGEDCOM RSG2300PNC V5.X RUGGEDCOM RSG2288 V5.X RUGGEDCOM RS1600F RUGGEDCOM RS416NC RUGGEDCOM RS930L RUGGEDCOM RSG907R RUGGEDCOM RSG2300P V5.X RUGGEDCOM RS910W RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS940GNC RUGGEDCOM RS900GNC RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RMC8388NC V5.X RUGGEDCOM RS940GF RUGGEDCOM RS910LNC RUGGEDCOM RSG2288NC V4.X RUGGEDCOM RSG2488 V5.X RUGGEDCOM RMC30 RUGGEDCOM RS900GF RUGGEDCOM RS8000ANC RUGGEDCOM RMC8388NC V4.X RUGGEDCOM RS1600T RUGGEDCOM M969F RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RS400NC RUGGEDCOM RS900MNC-GETS-C01 RUGGEDCOM RS900M-GETS-C01 RUGGEDCOM RSG2488NC V4.X RUGGEDCOM M2200F RUGGEDCOM RP110 RUGGEDCOM i801 RUGGEDCOM RS416v2 V4.X RUGGEDCOM RS416NCv2 V4.X RUGGEDCOM RS8000TNC RUGGEDCOM RSG2300P V4.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS920W RUGGEDCOM RS900F RUGGEDCOM M2200 RUGGEDCOM RS900MNC-GETS-XX RUGGEDCOM RSG2300NC V5.X RUGGEDCOM RS900GNC(32M) V4.X RUGGEDCOM RS900 RUGGEDCOM RSG2100 RUGGEDCOM M969NC RUGGEDCOM RS416PNC RUGGEDCOM RS1600FNC RUGGEDCOM RS400 RUGGEDCOM RS900NC(32M) V5.X RUGGEDCOM RS1600TNC RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM M969 RUGGEDCOM RS416PNCv2 V4.X RUGGEDCOM M2200NC RUGGEDCOM RS8000A RUGGEDCOM i803 RUGGEDCOM RSG2100PNC RUGGEDCOM RSG920PNC V5.X RUGGEDCOM RSG2100NC RUGGEDCOM RSG2488F RUGGEDCOM RP110NC RUGGEDCOM RSG2200 RUGGEDCOM RSG2488NC V5.X RUGGEDCOM RSL910NC RUGGEDCOM RS969NC RUGGEDCOM RS416 RUGGEDCOM RST2228P RUGGEDCOM i800 RUGGEDCOM RS900M-STND-C01 RUGGEDCOM RS900M-GETS-XX RUGGEDCOM RST916P RUGGEDCOM RS416PNCv2 V5.X RUGGEDCOM RS416NCv2 V5.X RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RSL910 RUGGEDCOM RSG2100PF RUGGEDCOM RS900GP RUGGEDCOM RST916C RUGGEDCOM RS900GPNC RUGGEDCOM RSG2100F RUGGEDCOM RSG2488 V4.X RUGGEDCOM i802 RUGGEDCOM RS900GNC(32M) V5.X RUGGEDCOM RST2228 RUGGEDCOM RS401 RUGGEDCOM RSG2300NC V4.X RUGGEDCOM RSG920PNC V4.X RUGGEDCOM i802NC RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM RSG2300F RUGGEDCOM RSG2300PNC V4.X RUGGEDCOM RS900NC RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RMC30NC RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RSG2200F RUGGEDCOM M2100NC RUGGEDCOM RSG2100P (32M) V5.X

CWE ID-CWE-684

Incorrect Provision of Specified Functionality

CVE-2023-24482

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-1.13% / 78.79%

7 Day CHG~0.00%

Published-14 Feb, 2023 | 10:36

Updated-20 Mar, 2025 | 16:14

A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause denial of service condition.

Vendor-Siemens AG

Product-comos COMOS V10.3.3.1 COMOS V10.3.3.3 COMOS V10.3.3.4 COMOS V10.3.3.2 COMOS V10.4.2.0 COMOS V10.2 COMOS V10.4.0.0 COMOS V10.4.1.0

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2005-2424

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-1.64% / 82.43%

7 Day CHG~0.00%

Published-03 Aug, 2005 | 04:00

Updated-16 Apr, 2026 | 00:27

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.

Vendor-n/a Siemens AG

Product-santis_50 n/a

CVE-2021-33719

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.56% / 68.69%

7 Day CHG~0.00%

Published-14 Sep, 2021 | 10:47

Updated-03 Aug, 2024 | 23:58

A vulnerability has been identified in SIPROTEC 5 relays with CPU variants CP050 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP100 (All versions < V8.80), SIPROTEC 5 relays with CPU variants CP300 (All versions < V8.80). Specially crafted packets sent to port 4443/tcp could cause a Denial-of-Service condition or potential remote code execution.

Vendor-Siemens AG

Product-siprotec_5_with_cpu_variant_cp300 siprotec_5_with_cpu_variant_cp100 siprotec_5_with_cpu_variant_cp050 SIPROTEC 5 relays with CPU variants CP050 SIPROTEC 5 relays with CPU variants CP300 SIPROTEC 5 relays with CPU variants CP100

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-52335

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.3||CRITICAL

EPSS-1.17% / 79.14%

7 Day CHG~0.00%

Published-06 Dec, 2024 | 13:14

Updated-15 Apr, 2026 | 00:35

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF05). The affected application do not properly sanitize input data before sending it to the SQL server. This could allow an attacker with access to the application could use this vulnerability to execute malicious SQL commands to compromise the whole database.

Vendor-Siemens AG

Product-syngo.plaza VB30E syngo_plaza_vb30e

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-11466

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.42% / 85.52%

7 Day CHG~0.00%

Published-12 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 08:10

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). Specially crafted network packets sent to port 102/tcp (ISO-TSAP) could allow a remote attacker to either cause a Denial-of-Service condition of the integrated software firewall or allow to execute code in the context of the software firewall. The security vulnerability could be exploited by an attacker with network access to the affected systems on port 102/tcp. Successful exploitation requires no user privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known

Vendor-Siemens AG

Product-sinumerik_808d_v4.8 sinumerik_840d_sl_v4.7 sinumerik_808d_v4.7_firmware sinumerik_828d_v4.7_firmware sinumerik_840d_sl_v4.7_firmware sinumerik_840d_sl_v4.8_firmware sinumerik_840d_sl_v4.8 sinumerik_828d_v4.7 sinumerik_808d_v4.8_firmware sinumerik_808d_v4.7 SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8

CWE ID-CWE-248

Uncaught Exception

CVE-1999-0017

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.55% / 68.33%

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-16 Apr, 2026 | 00:27

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

Vendor-sco washington_university n/a Siemens AG IBM Corporation NetBSD FreeBSD Foundation GNU Sun Microsystems (Oracle Corporation)The MITRE Corporation (Caldera)

Product-openserver sunos openlinux reliant_unix wu-ftpd inet freebsd aix unixware netbsd open_desktop n/a

CVE-2024-50557

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-8.6||HIGH

EPSS-1.01% / 77.61%

7 Day CHG~0.00%

Published-12 Nov, 2024 | 12:49

Updated-20 Nov, 2024 | 16:47

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1BA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1AA00-2AA2) (All versions < V8.2), SCALANCE M816-1 ADSL-Router (6GK5816-1BA00-2AA2) (All versions < V8.2), SCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2) (All versions < V8.2), SCALANCE M874-2 (6GK5874-2AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 (6GK5874-3AA00-2AA2) (All versions < V8.2), SCALANCE M874-3 3G-Router (CN) (6GK5874-3AA00-2FA2) (All versions < V8.2), SCALANCE M876-3 (6GK5876-3AA02-2BA2) (All versions < V8.2), SCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2) (All versions < V8.2), SCALANCE M876-4 (6GK5876-4AA10-2BA2) (All versions < V8.2), SCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2) (All versions < V8.2), SCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2) (All versions < V8.2), SCALANCE MUM853-1 (A1) (6GK5853-2EA10-2AA1) (All versions < V8.2), SCALANCE MUM853-1 (B1) (6GK5853-2EA10-2BA1) (All versions < V8.2), SCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1) (All versions < V8.2), SCALANCE MUM856-1 (A1) (6GK5856-2EA10-3AA1) (All versions < V8.2), SCALANCE MUM856-1 (B1) (6GK5856-2EA10-3BA1) (All versions < V8.2), SCALANCE MUM856-1 (CN) (6GK5856-2EA00-3FA1) (All versions < V8.2), SCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1) (All versions < V8.2), SCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1) (All versions < V8.2), SCALANCE S615 EEC LAN-Router (6GK5615-0AA01-2AA2) (All versions < V8.2), SCALANCE S615 LAN-Router (6GK5615-0AA00-2AA2) (All versions < V8.2). Affected devices do not properly validate input in configuration fields of the iperf functionality. This could allow an unauthenticated remote attacker to execute arbitrary code on the device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2018-11462

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-10.54% / 93.45%

7 Day CHG~0.00%

Published-12 Dec, 2018 | 16:00

Updated-05 Aug, 2024 | 08:10

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). By sending a specially crafted authentication request to the affected systems a remote attacker could escalate his privileges to an elevated user account but not to root. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-sinumerik_808d_v4.8 sinumerik_840d_sl_v4.7 sinumerik_808d_v4.7_firmware sinumerik_828d_v4.7_firmware sinumerik_840d_sl_v4.7_firmware sinumerik_840d_sl_v4.8 sinumerik_828d_v4.7 sinumerik_840d_sl_v4.8_firmware sinumerik_808d_v4.8_firmware sinumerik_808d_v4.7 SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8

CWE ID-CWE-264

Not Available

CVE-2024-47901

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-10||CRITICAL

EPSS-2.91% / 86.73%

7 Day CHG~0.00%

Published-23 Oct, 2024 | 14:21

Updated-30 Oct, 2024 | 15:39

A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fire Subscriber (All versions < V7.2.12 only if the IP interface is enabled (which is not the default configuration)). The web server of affected devices does not sanitize the input parameters in specific GET requests that allow for code execution on operating system level. In combination with other vulnerabilities (CVE-2024-47902, CVE-2024-47903, CVE-2024-47904) this could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

Vendor-Siemens AG

Product-intermesh_7707_fire_subscriber intermesh_7177_hybrid_2.0_subscriber intermesh_7707_fire_subscriber_firmware InterMesh 7707 Fire Subscriber InterMesh 7177 Hybrid 2.0 Subscriber intermesh_7177_hybrid2.0_subscriber intermesh_7707_fire_subscriber

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVE-2021-31886

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-1.84% / 83.41%

7 Day CHG~0.00%

Published-09 Nov, 2021 | 11:31

Updated-03 Aug, 2024 | 23:10

A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.19), APOGEE PXC Modular (BACnet) (All versions < V3.5.4), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.19), Desigo PXC00-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC00-U (All versions >= V2.3 and < V6.30.016), Desigo PXC001-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC100-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC12-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC128-U (All versions >= V2.3 and < V6.30.016), Desigo PXC200-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC22.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC36.1-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “USER” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0010)

Vendor-Siemens AG

Product-talon_tc_compact desigo_pxm20-e desigo_pxc22.1-e.d apogee_pxc_compact desigo_pxc001-e.d_firmware apogee_modular_equiment_controller_firmware desigo_pxc12-e.d apogee_pxc_compact_firmware desigo_pxc200-e.d_firmware apogee_modular_equiment_controller desigo_pxc100-e.d apogee_modular_building_controller desigo_pxc001-e.d apogee_pxc_modular_firmware talon_tc_modular_firmware talon_tc_modular desigo_pxc22.1-e.d_firmware desigo_pxc50-e.d apogee_modular_building_controller_firmware desigo_pxc12-e.d_firmware desigo_pxc22-e.d desigo_pxc22-e.d_firmware desigo_pxc00-u_firmware nucleus_readystart_v3 desigo_pxc00-e.d desigo_pxc100-e.d_firmware desigo_pxc200-e.d desigo_pxc00-e.d_firmware desigo_pxc50-e.d_firmware nucleus_net desigo_pxc64-u talon_tc_compact_firmware desigo_pxc36.1-e.d_firmware desigo_pxc64-u_firmware desigo_pxc128-u desigo_pxc00-u apogee_pxc_modular desigo_pxm20-e_firmware desigo_pxc36.1-e.d desigo_pxc128-u_firmware nucleus_source_code TALON TC Compact (BACnet)Desigo PXC64-U Desigo PXC00-U Nucleus Source Code APOGEE PXC Compact (BACnet)APOGEE MEC (PPC) (P2 Ethernet)Nucleus NET Desigo PXC001-E.D Desigo PXC100-E.D Desigo PXC12-E.D APOGEE MBC (PPC) (BACnet)Desigo PXC22.1-E.D TALON TC Modular (BACnet)Nucleus ReadyStart V3 APOGEE MEC (PPC) (BACnet)Desigo PXC00-E.D APOGEE MBC (PPC) (P2 Ethernet)Desigo PXC50-E.D APOGEE PXC Compact (P2 Ethernet)Desigo PXC36.1-E.D APOGEE PXC Modular (P2 Ethernet)Desigo PXC22-E.D Desigo PXC200-E.D Desigo PXM20-E APOGEE PXC Modular (BACnet)Desigo PXC128-U

CWE ID-CWE-170

Improper Null Termination

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-31895

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-8.1||HIGH

EPSS-1.16% / 79.08%

7 Day CHG~0.00%

Published-13 Jul, 2021 | 11:02

Updated-14 Oct, 2025 | 10:15

A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM i803 (All versions < V4.3.7), RUGGEDCOM M2100 (All versions < V4.3.7), RUGGEDCOM M2200 (All versions < V4.3.7), RUGGEDCOM M969 (All versions < V4.3.7), RUGGEDCOM RMC30 (All versions < V4.3.7), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.7), RUGGEDCOM RMC8388 V5.X (All versions < V5.5.4), RUGGEDCOM RP110 (All versions < V4.3.7), RUGGEDCOM RS1600 (All versions < V4.3.7), RUGGEDCOM RS1600F (All versions < V4.3.7), RUGGEDCOM RS1600T (All versions < V4.3.7), RUGGEDCOM RS400 (All versions < V4.3.7), RUGGEDCOM RS401 (All versions < V4.3.7), RUGGEDCOM RS416 (All versions < V4.3.7), RUGGEDCOM RS416P (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.5.4), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416v2 V5.X (All versions < 5.5.4), RUGGEDCOM RS8000 (All versions < V4.3.7), RUGGEDCOM RS8000A (All versions < V4.3.7), RUGGEDCOM RS8000H (All versions < V4.3.7), RUGGEDCOM RS8000T (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900G (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900GP (All versions < V4.3.7), RUGGEDCOM RS900L (All versions < V4.3.7), RUGGEDCOM RS900W (All versions < V4.3.7), RUGGEDCOM RS910 (All versions < V4.3.7), RUGGEDCOM RS910L (All versions < V4.3.7), RUGGEDCOM RS910W (All versions < V4.3.7), RUGGEDCOM RS920L (All versions < V4.3.7), RUGGEDCOM RS920W (All versions < V4.3.7), RUGGEDCOM RS930L (All versions < V4.3.7), RUGGEDCOM RS930W (All versions < V4.3.7), RUGGEDCOM RS940G (All versions < V4.3.7), RUGGEDCOM RS969 (All versions < V4.3.7), RUGGEDCOM RSG2100 (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2100P (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2200 (All versions < V4.3.7), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2288 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300P V5.X (All versions < V5.5.4), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2488 V5.X (All versions < V5.5.4), RUGGEDCOM RSG907R (All versions < V5.5.4), RUGGEDCOM RSG908C (All versions < V5.5.4), RUGGEDCOM RSG909R (All versions < V5.5.4), RUGGEDCOM RSG910C (All versions < V5.5.4), RUGGEDCOM RSG920P V4.X (All versions < V4.3.7), RUGGEDCOM RSG920P V5.X (All versions < V5.5.4), RUGGEDCOM RSL910 (All versions < V5.5.4), RUGGEDCOM RST2228 (All versions < V5.5.4), RUGGEDCOM RST2228P (All versions < V5.5.4), RUGGEDCOM RST916C (All versions < V5.5.4), RUGGEDCOM RST916P (All versions < V5.5.4). The DHCP client in affected devices fails to properly sanitize incoming DHCP packets. This could allow an unauthenticated remote attacker to cause memory to be overwritten, potentially allowing remote code execution.

Vendor-Siemens AG

Product-ruggedcom_ros_rs900 ruggedcom_ros_m2100 ruggedcom_rst916p ruggedcom_ros_rs900l ruggedcom_ros_rs910w ruggedcom_ros_rs969 ruggedcom_i802 ruggedcom_ros_rs920l ruggedcom_rsg2300p ruggedcom_ros_rs910l ruggedcom_rs910l ruggedcom_rmc30 ruggedcom_ros_rmc30 ruggedcom_rs900w ruggedcom_ros_rsg2200 ruggedcom_ros_rsg900r ruggedcom_rs8000t ruggedcom_rs940g ruggedcom_ros_i803 ruggedcom_m969 ruggedcom_rs930l ruggedcom_ros_m2200 ruggedcom_rsg2100 ruggedcom_ros_rsg2288 ruggedcom_rsg2100p ruggedcom_ros_rmc ruggedcom_rsg900g ruggedcom_rs8000 ruggedcom_rs910w ruggedcom_ros_rsg900 ruggedcom_ros_rsl910 ruggedcom_ros_rs416 ruggedcom_ros_rs930w ruggedcom_ros_m969 ruggedcom_ros_rsg2300p ruggedcom_i803 ruggedcom_ros_rsg900g ruggedcom_ros_rsg920p ruggedcom_rsg900r ruggedcom_ros_rp110 ruggedcom_rs401 ruggedcom_rs900 ruggedcom_ros_rmc8388 ruggedcom_ros_rs900g ruggedcom_rmc41 ruggedcom_rs900g ruggedcom_rs910 ruggedcom_ros_rsg2100 ruggedcom_rsg920p ruggedcom_rp110 ruggedcom_ros_rmc41 ruggedcom_ros_rsg2300 ruggedcom_ros_i802 ruggedcom_rs416 ruggedcom_ros_rst916c ruggedcom_rs8000h ruggedcom_rs920l ruggedcom_ros_rst916p ruggedcom_rmc8388 ruggedcom_ros_rs416v2 ruggedcom_ros_rs8000 ruggedcom_ros_rs8000a ruggedcom_ros_rst2228 ruggedcom_rs400 ruggedcom_ros_rs900w ruggedcom_ros_rs930l ruggedcom_ros_rs940g ruggedcom_rs969 ruggedcom_m2100 ruggedcom_ros_i800 ruggedcom_rsg2288 ruggedcom_rsg900 ruggedcom_m2200 ruggedcom_ros_rs920w ruggedcom_ros_rs401 ruggedcom_ros_rs910 ruggedcom_rsg2300 ruggedcom_rsg2488 ruggedcom_rsg900c ruggedcom_ros_rsg900c ruggedcom_rsg2200 ruggedcom_rmc20 ruggedcom_rs416v2 ruggedcom_ros_rsg2488 ruggedcom_ros_rsg2100p ruggedcom_rmc40 ruggedcom_rs930w ruggedcom_rs920w ruggedcom_rs900l ruggedcom_ros_rs8000t ruggedcom_rmc ruggedcom_rs900gp ruggedcom_ros_rs400 ruggedcom_rs8000a ruggedcom_ros_rmc40 ruggedcom_ros_rs900gp ruggedcom_ros_rs8000h ruggedcom_ros_rmc20 ruggedcom_i801 ruggedcom_rst2228 ruggedcom_ros_i801 ruggedcom_rsl910 ruggedcom_i800 ruggedcom_rst916c RUGGEDCOM RST916P RUGGEDCOM RSG2488 V4.X RUGGEDCOM RS969 RUGGEDCOM RS900G RUGGEDCOM i801 RUGGEDCOM RSG920P V5.X RUGGEDCOM RS930L RUGGEDCOM RS1600T RUGGEDCOM RS401 RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RSG920P V4.X RUGGEDCOM RS920L RUGGEDCOM M2200 RUGGEDCOM RSG910C RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RSG2100P RUGGEDCOM RSG2288 V4.X RUGGEDCOM RS8000T RUGGEDCOM RS8000H RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM M2100 RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RSG2300 V4.X RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS8000 RUGGEDCOM RS900L RUGGEDCOM RMC8388 V5.X RUGGEDCOM RS400 RUGGEDCOM RS910L RUGGEDCOM RSG907R RUGGEDCOM RSL910 RUGGEDCOM RS900GP RUGGEDCOM RST916C RUGGEDCOM RSG2200 RUGGEDCOM RSG2488 V5.X RUGGEDCOM RS940G RUGGEDCOM RMC8388 V4.X RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RS910W RUGGEDCOM RS910 RUGGEDCOM RS1600F RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM RSG2100 RUGGEDCOM RMC30 RUGGEDCOM RSG2288 V5.X RUGGEDCOM RSG2300P V4.X RUGGEDCOM RSG908C RUGGEDCOM RS416v2 V4.X RUGGEDCOM i800 RUGGEDCOM RSG909R RUGGEDCOM i802 RUGGEDCOM RP110 RUGGEDCOM RS1600 RUGGEDCOM RS416P RUGGEDCOM RST2228P RUGGEDCOM RSG2100P (32M) V5.X RUGGEDCOM RS8000A RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS920W RUGGEDCOM M969 RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RST2228 RUGGEDCOM RS416 RUGGEDCOM RS930W RUGGEDCOM RSG2300P V5.X RUGGEDCOM i803 RUGGEDCOM RS900W

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2002-1484

Matching Score-8

Assigner-MITRE Corporation

View Details

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-7.41% / 91.95%

7 Day CHG~0.00%

Published-18 Mar, 2003 | 05:00

Updated-16 Apr, 2026 | 00:27

DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.

Vendor-n/a Siemens AG

Product-db4web n/a

CWE ID-CWE-918

Server-Side Request Forgery (SSRF)

CVE-2022-32260

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.27%

7 Day CHG~0.00%

Published-14 Jun, 2022 | 09:22

Updated-03 Aug, 2024 | 07:39

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for UMC (User Management Component) users. An attacker could use these temporary credentials for authentication bypass in certain scenarios.

Vendor-Siemens AG

Product-sinema_remote_connect_server SINEMA Remote Connect Server

CWE ID-CWE-286

Incorrect User Management

CVE-2022-43724

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.68% / 72.11%

7 Day CHG~0.00%

Published-13 Dec, 2022 | 00:00

Updated-22 Apr, 2025 | 16:15

A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software transmits the database credentials for the inbuilt SQL server in cleartext. In combination with the by default enabled xp_cmdshell feature unauthenticated remote attackers could execute custom OS commands. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.

Vendor-Siemens AG

Product-sicam_pas\/pqs SICAM PAS/PQS

CWE ID-CWE-319

Cleartext Transmission of Sensitive Information

CVE-2024-47902

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-0.36% / 58.62%

7 Day CHG~0.00%

Published-23 Oct, 2024 | 14:21

Updated-30 Oct, 2024 | 15:48

Vendor-Siemens AG

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2017-9939

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-2.06% / 84.33%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 00:00

Updated-13 May, 2026 | 00:24

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations.

Vendor-n/a Siemens AG

Product-sipass_integrated SiPass integrated All versions before V2.70

CWE ID-CWE-287

Improper Authentication

CVE-2022-37889

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

View Details

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-9.8||CRITICAL

EPSS-1.15% / 78.99%

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba Networks AP management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system of Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below; Aruba InstantOS 6.5.x: 6.5.4.23 and below; Aruba InstantOS 8.6.x: 8.6.0.18 and below; Aruba InstantOS 8.7.x: 8.7.1.9 and below; Aruba InstantOS 8.10.x: 8.10.0.1 and below; ArubaOS 10.3.x: 10.3.1.0 and below; Aruba has released upgrades for Aruba InnstantOS that address these security vulnerabilities.

Vendor-n/a Siemens AG Aruba Networks

Product-arubaos scalance_w1750d_firmware instant scalance_w1750d Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37887

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

View Details

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-9.8||CRITICAL

EPSS-1.15% / 78.99%

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

Vendor-n/a Siemens AG Aruba Networks

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-37886

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

View Details

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-9.8||CRITICAL

EPSS-1.15% / 78.99%

7 Day CHG~0.00%

Published-07 Oct, 2022 | 00:00

Updated-03 Aug, 2024 | 10:37

Vendor-n/a Siemens AG Aruba Networks

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-36361

Matching Score-8

Assigner-Siemens

View Details

Matching Score-8

Assigner-Siemens

CVSS Score-9.8||CRITICAL

EPSS-0.55% / 68.54%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-20 Nov, 2024 | 14:54

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). Affected devices do not properly validate the structure of TCP packets in several methods. This could allow an attacker to cause buffer overflows, get control over the instruction counter and run custom code.

Vendor-Siemens AG

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-12262

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs