ByteOS

cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*

>>simatic_wincc_runtime_advanced>>Versions before 16(exclusive)

cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:-:*:*:*:*:*:*

cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update1:*:*:*:*:*:*

cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update2:*:*:*:*:*:*

cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:16:update3:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\"_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update1:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update2:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_7\"_firmware:16:update3:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\"_firmware>>16

cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_7\":-:*:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_7\">>-

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:16:*:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:16:update1:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:16:update2:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_15\"_firmware:16:update3:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\"_firmware>>16

cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels_15\":-:*:*:*:*:*:*:*

>>simatic_hmi_comfort_outdoor_panels_15\">>-

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\"_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_comfort_panels_4\"_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\"_firmware:16:-:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\"_firmware:16:update1:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\"_firmware:16:update2:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_4\"_firmware:16:update3:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_hmi_comfort_panels_4\":-:*:*:*:*:*:*:*

>>simatic_hmi_comfort_panels_4\">>-

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\"_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_comfort_panels_22\"_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\"_firmware:16:-:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\"_firmware:16:update1:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\"_firmware:16:update2:*:*:*:*:*:*

cpe:2.3:o:siemens:simatic_hmi_comfort_panels_22\"_firmware:16:update3:*:*:*:*:*:*

cpe:2.3:h:siemens:simatic_hmi_comfort_panels_22\":-:*:*:*:*:*:*:*

>>simatic_hmi_comfort_panels_22\">>-

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update1:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update2:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:16:update3:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f_firmware>>16

cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp400f>>-

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update1:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update2:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:16:update3:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700_firmware>>16

cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700>>-

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update1:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update2:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f_firmware>>16

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:16:update3:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f_firmware>>16

cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp700f>>-

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp900_firmware>>Versions before 16(exclusive)

cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:16:-:*:*:*:*:*:*

>>simatic_hmi_ktp_mobile_panels_ktp900_firmware>>16

Weaknesses

CWE ID	Type	Source
CWE-788	Secondary	productcert@siemens.com

CWE ID: CWE-788

Type: Secondary

Source: productcert@siemens.com

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf	productcert@siemens.com	Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12	productcert@siemens.com	Third Party Advisory US Government Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory US Government Resource

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf

Source: productcert@siemens.com

Resource:

Vendor Advisory

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12

Source: productcert@siemens.com

Resource:

Third Party Advisory

US Government Resource

Hyperlink: https://cert-portal.siemens.com/productcert/pdf/ssa-538778.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://us-cert.cisa.gov/ics/advisories/icsa-21-131-12

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Third Party Advisory

US Government Resource

Similar CVEs

262Records found

CVE-2019-18306

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.51% / 66.59%

7 Day CHG-0.31%

Published-12 Dec, 2019 | 19:08

Updated-05 Aug, 2024 | 01:47

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-sppa-t3000_ms3000_migration_server SPPA-T3000 MS3000 Migration Server

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-787

Out-of-bounds Write

CVE-2019-18300

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.38% / 59.63%

7 Day CHG-0.23%

Published-12 Dec, 2019 | 19:08

Updated-05 Aug, 2024 | 01:47

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-sppa-t3000_ms3000_migration_server SPPA-T3000 MS3000 Migration Server

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2019-18292

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.40% / 61.40%

7 Day CHG-0.25%

Published-12 Dec, 2019 | 19:08

Updated-05 Aug, 2024 | 01:47

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-sppa-t3000_ms3000_migration_server SPPA-T3000 MS3000 Migration Server

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-4832

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.43% / 63.08%

7 Day CHG~0.00%

Published-24 Apr, 2018 | 17:00

Updated-05 Aug, 2024 | 05:18

A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2021-27385

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.51% / 66.72%

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). A remote attacker could send specially crafted packets to SmartVNC device layout handler on client side, which could influence the amount of resources consumed and result in a Denial-of-Service (infinite loop) condition.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2025-6052

Matching Score-8

Assigner-Red Hat, Inc.

Product-glib Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 9 SIMATIC CN 4100 RUGGEDCOM RST2428P

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-3.7||LOW

EPSS-0.42% / 62.15%

7 Day CHG+0.13%

Published-13 Jun, 2025 | 15:40

Updated-02 Jun, 2026 | 14:16

Glib: integer overflow in g_string_maybe_expand() leading to potential buffer overflow in glib gstring

A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.

Vendor-Siemens AG Red Hat, Inc.The GNOME Project

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2021-27386

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.59% / 69.67%

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the device layout handler on client side, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-401

Missing Release of Memory after Effective Lifetime

CVE-2021-27290

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-2.46% / 85.54%

7 Day CHG~0.00%

Published-12 Mar, 2021 | 21:47

Updated-03 Aug, 2024 | 20:48

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.

Vendor-ssri_project n/a Oracle Corporation Siemens AG

Product-sinec_infrastructure_network_services ssri graalvm n/a

CVE-2022-40227

Matching Score-8

Assigner-Siemens

Product-simatic_hmi_ktp_mobile_panels siplus_hmi_ktp1200_basic_firmware siplus_hmi_ktp400_basic simatic_hmi_comfort_panels_firmware simatic_hmi_ktp1200_basic_firmware simatic_hmi_comfort_panels siplus_hmi_ktp700_basic simatic_hmi_ktp_mobile_panels_firmware simatic_hmi_ktp900_basic_firmware siplus_hmi_ktp700_basic_firmware simatic_hmi_ktp400_basic_firmware siplus_hmi_ktp1200_basic simatic_hmi_ktp700_basic siplus_hmi_ktp400_basic_firmware simatic_hmi_ktp900_basic simatic_hmi_ktp1200_basic simatic_hmi_ktp400_basic siplus_hmi_ktp900_basic siplus_hmi_ktp900_basic_firmware simatic_hmi_ktp700_basic_firmware SIPLUS HMI KTP1200 BASIC SIMATIC HMI Comfort Panels (incl. SIPLUS variants)SIPLUS HMI KTP400 BASIC SIMATIC HMI KTP900 Basic SIPLUS HMI KTP900 BASIC SIMATIC HMI KTP1200 Basic SIMATIC HMI KTP700 Basic SIPLUS HMI KTP700 BASIC SIMATIC HMI KTP Mobile Panels SIMATIC HMI KTP400 Basic

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.10% / 27.30%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V17 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V17 Update 4), SIMATIC HMI KTP1200 Basic (All versions < V17 Update 5), SIMATIC HMI KTP400 Basic (All versions < V17 Update 5), SIMATIC HMI KTP700 Basic (All versions < V17 Update 5), SIMATIC HMI KTP900 Basic (All versions < V17 Update 5), SIPLUS HMI KTP1200 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP400 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP700 BASIC (All versions < V17 Update 5), SIPLUS HMI KTP900 BASIC (All versions < V17 Update 5). Affected devices do not properly validate input sent to certain services over TCP. This could allow an unauthenticated remote attacker to cause a permanent denial of service condition (requiring a device reboot) by sending specially crafted TCP packets.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2021-27383

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.59% / 69.67%

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4), SINAMICS GH150 (All versions), SINAMICS GL150 (with option X30) (All versions), SINAMICS GM150 (with option X30) (All versions), SINAMICS SH150 (All versions), SINAMICS SL150 (All versions), SINAMICS SM120 (All versions), SINAMICS SM150 (All versions), SINAMICS SM150i (All versions). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-25676

Matching Score-8

Assigner-Siemens

Product-scalance_s615 scalance_m-800_firmware scalance_sc-600 scalance_sc-600_firmware ruggedcom_rm1224_firmware scalance_m-800 scalance_s615_firmware ruggedcom_rm1224 SCALANCE M-800 RUGGEDCOM RM1224 SCALANCE S615 SCALANCE SC-600

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.33% / 56.34%

7 Day CHG~0.00%

Published-15 Mar, 2021 | 17:03

Updated-03 Aug, 2024 | 20:11

A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.

Vendor-Siemens AG

CWE ID-CWE-307

Improper Restriction of Excessive Authentication Attempts

CVE-2019-13927

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.59% / 69.56%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 13:19

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server (All firmware versions < V6.00.320). The device contains a vulnerability that could allow an attacker to cause a denial of service condition on the device's web server by sending a specially crafted HTTP message to the web server port (tcp/80). The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device's web service. While the device itself stays operational, the web server responds with HTTP status code 404 (Not found) to any further request. A reboot is required to recover the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-472

External Control of Assumed-Immutable Web Parameter

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2019-13926

Matching Score-8

Assigner-Siemens

Product-scalance_s623 scalance_s612_firmware scalance_s627-2m_firmware scalance_s602 scalance_s627-2m scalance_s602_firmware scalance_s623_firmware scalance_s612 SCALANCE S627-2M SCALANCE S623 SCALANCE S602 SCALANCE S612

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.20% / 42.31%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3.0 and < V4.1), SCALANCE S627-2M (All versions >= V3.0 and < V4.1). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionality of the device.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-25663

Matching Score-8

Assigner-Siemens

Product-nucleus_net capital_vstar nucleus_readystart nucleus_source_code Nucleus Source Code Nucleus NET Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 Nucleus ReadyStart V4 Nucleus ReadyStart V3

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.71% / 72.63%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-11 Mar, 2025 | 10:15

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values.

Vendor-Siemens AG

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2019-13940

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.60% / 70.02%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8FX PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 315T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317T-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 317TF-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319-3 PN/DP (All versions < V3.X.17), SIMATIC S7-300 CPU 319F-3 PN/DP (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX 2010 (All versions), SIMATIC WinAC RTX F 2010 (All versions), SIPLUS ET 200S IM151-8 PN/DP CPU (All versions < V3.X.17), SIPLUS ET 200S IM151-8F PN/DP CPU (All versions < V3.X.17), SIPLUS S7-300 CPU 314C-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 315F-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317-2 PN/DP (All versions < V3.X.17), SIPLUS S7-300 CPU 317F-2 PN/DP (All versions < V3.X.17). Affected devices contain a vulnerability that could cause a denial of service condition of the web server by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp. Beyond the web service, no other functions or interfaces are affected by the denial of service condition.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13925

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.17% / 37.69%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-13942

Matching Score-8

Assigner-Siemens

Product-en100_ethernet_module_with_firmware_variant_profinet_io en100_ethernet_module_with_firmware_variant_modbus_tcp en100_ethernet_module_with_firmware_variant_iec_61850 en100_ethernet_module_with_firmware_variant_dnp3_tcp en100_ethernet_module_with_firmware_variant_iec104 en100_ethernet_module EN100 Ethernet module PROFINET IO variant EN100 Ethernet module DNP3 variant EN100 Ethernet module IEC104 variant EN100 Ethernet module Modbus TCP variant EN100 Ethernet module IEC 61850 variant

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.34% / 57.33%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 19:08

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). An unauthorized user could exploit a buffer overflow vulnerability in the webserver. Specially crafted packets sent could cause a Denial-of-Service condition and if certain conditions are met, the affected devices must be restarted manually to fully recover. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2019-13946

Matching Score-8

Assigner-Siemens

Product-simatic_et200al_im_157-1_pn_firmware simatic_rf182c scalance_xr526 simatic_et200m_im153-4_pn_io_hf_firmware scalance_xr552_firmware simatic_et200mp_im155-5_pn_st_firmware scalance_xr552 simatic_cp_1616 ruggedcom_rm1224_firmware simatic_cp_1604 simatic_et200sp_im155-6_pn_hf dk_standard_ethernet_controller scalance_xr-300wg scalance_xp-200 simatic_et200mp_im155-5_pn_hf_firmware scalance_xf-200ba simatic_ipc_support scalance_x-400_firmware scalance_x-300 scalance_x-200irt simatic_cp_443-1 simatic_cp_343-1_erpc scalance_xf-200_firmware scalance_xf-200 simatic_et200sp_im155-6_pn_basic simatic_et200sp_im155-6_pn_hf_firmware scalance_s615_firmware simatic_cp_1616_firmware scalance_xr524_firmware scalance_w700_ieee_802.11n_firmware scalance_m-800_firmware simatic_et200m_im153-4_pn_io_st_firmware simatic_cp_443-1_advanced_firmware scalance_xc-200_firmware profinet_driver simatic_cp_343-1 simatic_et200al_im_157-1_pn im_154-3_pn_hf simatic_cp_343-1_lean_firmware simatic_mv420_firmware scalance_xr-300wg_firmware simatic_mv420 im_154-4_pn_hf simatic_et200ecopn scalance_x-200irt_firmware simatic_et200s_firmware scalance_xr526_firmware scalance_x-300_firmware ek-ertec_200 scalance_xr524 simatic_rf600 simatic_cp_443-1_opc_ua ek-ertec_200_firmware sinamics_dcp_firmware simatic_cp_443-1_advanced simatic_mv440 simatic_cp_343-1_firmware scalance_xm-400 simatic_et200pro_firmware simatic_cp_343-1_lean scalance_xf-200ba_firmware simatic_et200ecopn_firmware ek-ertec_200p_firmware scalance_xr528_firmware scalance_xr528 simatic_rf180c simatic_mv440_firmware ruggedcom_rm1224 scalance_x-400 simatic_cp_1604_firmware scalance_s615 im_154-4_pn_hf_firmware simatic_cp_343-1_advanced_firmware simatic_cp_443-1_opc_ua_firmware simatic_rf600_firmware scalance_w700_ieee_802.11n simatic_pn\/pn_coupler_firmware simatic_et200m_im153-4_pn_io_st ek-ertec_200p sinamics_dcp simatic_et200s simatic_rf182c_firmware scalance_xp-200_firmware simatic_et200sp_im155-6_pn_basic_firmware simatic_et200mp_im155-5_pn_st simatic_cp_443-1_firmware scalance_xb-200 simatic_et200sp_im155-6_pn_st_firmware im_154-3_pn_hf_firmware scalance_xm-400_firmware simatic_cp_343-1_erpc_firmware simatic_et200pro scalance_xb-200_firmware simatic_pn\/pn_coupler simatic_et200sp_im155-6_pn_st simatic_et200mp_im155-5_pn_hf scalance_xc-200 simatic_rf180c_firmware simatic_cp_343-1_advanced scalance_m-800 simatic_et200m_im153-4_pn_io_hf SCALANCE XF208 SIMOTION D SCALANCE XR324-4M EEC (24V, ports on front)SCALANCE X204IRT SCALANCE X307-2 EEC (2x 24V, coated)SIMATIC PN/PN Coupler (incl. SIPLUS NET variants)SIMOTION P SCALANCE XB-200 family SCALANCE X204-2TS SCALANCE X307-3 SCALANCE XR324-12M (24V, ports on rear)SCALANCE X308-2 SIPLUS ET 200MP IM 155-5 PN HF T1 RAIL SCALANCE X307-2 EEC (230V, coated)SIMATIC RF180C SIMATIC MV440 HR SIPLUS NET SCALANCE X308-2 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN: IO-Link Master SCALANCE X202-2P IRT SCALANCE XR324-4M PoE (230V, ports on rear)SCALANCE X302-7 EEC (230V)SIMATIC CP 443-1 SOFTNET-IE PNIO SCALANCE S615 LAN-Router SCALANCE X206-1LD SIMATIC CP 343-1 Advanced SIMATIC ET200ecoPN, 8 DIO, DC24V/1,3A, 8xM12 SIMATIC ET 200M IM 153-4 PN IO HF (incl. SIPLUS variants)SIPLUS ET 200SP IM 155-6 PN HF T1 RAIL SCALANCE W-700 IEEE 802.11n family SIPLUS ET 200SP IM 155-6 PN ST TX RAIL SIMATIC MV420 SR-B SCALANCE XR-500 family SINAMICS DCP SIMATIC ET200ecoPN, 16DI, DC24V, 8xM12 SCALANCE XF204IRT SCALANCE X307-2 EEC (2x 230V)SIMATIC ET 200MP IM 155-5 PN ST SCALANCE M826-2 SHDSL-Router SCALANCE XF-200BA SCALANCE X204IRT PRO SIMATIC MV420 SR-P SCALANCE XP-200 SIMATIC RF182C SIPLUS NET CP 443-1 SIMOTION C SCALANCE X201-3P IRT SCALANCE M804PB SIMATIC ET200ecoPN, 8DO, DC24V/0,5A, 4xM12 Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P SIPLUS ET 200SP IM 155-6 PN ST BA SIMATIC ET 200pro IM 154-3 PN HF SCALANCE X206-1 SCALANCE XF204 SIMATIC MV420 SR-B Body Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 8xM12 SIMATIC IPC Support, Package for VxWorks SCALANCE X308-2LH SCALANCE XF204-2 SCALANCE XR324-4M EEC (24V, ports on rear)SCALANCE XR324-4M PoE (24V, ports on front)SCALANCE XM-400 family SCALANCE X302-7 EEC (2x 230V)SCALANCE X408-2 SCALANCE XF201-3P IRT SIMATIC ET200ecoPN, 8DO, DC24V/1,3A, 4xM12 SIPLUS ET 200SP IM 155-6 PN ST BA TX RAIL SIMATIC MV420 SR-P Body SCALANCE M816-1 ADSL-Router SIMATIC MV440 SR SCALANCE M812-1 ADSL-Router SCALANCE X307-2 EEC (2x 24V)SCALANCE X212-2 SCALANCE X306-1LD FE SCALANCE X308-2M TS SCALANCE M876-3 SIMATIC ET 200AL IM 157-1 PN SIMATIC ET200ecoPN, 8DI, DC24V, 8xM12 SIPLUS ET 200MP IM 155-5 PN ST TX RAIL SCALANCE X201-3P IRT PRO SCALANCE X302-7 EEC (2x 230V, coated)SCALANCE X320-1-2LD FE SCALANCE XR324-4M PoE TS (24V, ports on front)SCALANCE XR324-12M TS (24V)SCALANCE XR324-12M (230V, ports on rear)SCALANCE XF204-2BA IRT SCALANCE X204-2FM SIMATIC ET200ecoPN, 16DO DC24V/1,3A, 8xM12 SIMATIC CP 443-1 OPC UA SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)SIMATIC ET200ecoPN, 4AO U/I 4xM12 SCALANCE X204-2LD TS SIMATIC ET 200SP IM 155-6 PN HF SCALANCE X302-7 EEC (24V, coated)SIMATIC CP 443-1 Advanced SCALANCE XR-300WG family SCALANCE X224 SIMATIC ET 200SP IM 155-6 PN ST SIPLUS ET 200SP IM 155-6 PN HF PROFINET Driver for Controller SIMATIC RF600R family SCALANCE M876-4 (NAM)SCALANCE M874-3 SCALANCE X308-2LD SCALANCE X307-2 EEC (24V)SIMATIC ET 200SP IM 155-6 PN BA SCALANCE X208 SCALANCE M876-3 (ROK)SCALANCE X304-2FE SCALANCE X307-2 EEC (230V)SIPLUS NET CP 343-1 Lean SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)SIMATIC ET 200SP IM 155-6 PN ST BA SCALANCE X302-7 EEC (2x 24V)SIMATIC ET 200MP IM 155-5 PN HF RUGGEDCOM RM1224 family SIMATIC ET 200pro IM 154-4 PN HF SCALANCE X208PRO SIPLUS NET CP 343-1 SCALANCE X212-2LD SCALANCE X302-7 EEC (24V)SCALANCE X204-2 SCALANCE XF206-1 SIMATIC ET200S (incl. SIPLUS variants)SIMATIC CP 343-1 Lean SCALANCE XR324-4M EEC (2x 24V, ports on rear)SIMATIC ET200ecoPN, 8AI RTD/TC 8xM12 SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)SCALANCE XR324-4M PoE (24V, ports on rear)SIMATIC ET200ecoPN, 8AI; 4 U/I; 4 RTD/TC 8xM12 SIMATIC ET200ecoPN, 8DI, DC24V, 4xM12 SCALANCE X204-2LD SCALANCE M876-4 (EU)SIMATIC ET 200M IM 153-4 PN IO ST (incl. SIPLUS variants)SCALANCE X308-2M SCALANCE X308-2M PoE SCALANCE X310FE SCALANCE X308-2LH+SIPLUS NET CP 343-1 Advanced SIMATIC CP 343-1 SCALANCE X307-3LD Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller SIMATIC ET200ecoPN, 8 DO, DC24V/2A, 8xM12 SIPLUS NET CP 443-1 Advanced SCALANCE XF202-2P IRT SCALANCE X307-2 EEC (24V, coated)SCALANCE X307-2 EEC (2x 230V, coated)SCALANCE X302-7 EEC (2x 24V, coated)SCALANCE X202-2P IRT PRO SCALANCE X310 SCALANCE XR324-12M (24V, ports on front)SIPLUS ET 200MP IM 155-5 PN ST SCALANCE X320-1 FE SCALANCE M874-2 SCALANCE XR324-4M PoE (230V, ports on front)SIMATIC CP 343-1 ERPC SIPLUS ET 200SP IM 155-6 PN ST SIMATIC MV440 UR SCALANCE X216 SIMATIC CP 1616 and CP 1604 SCALANCE X302-7 EEC (230V, coated)SIPLUS ET 200MP IM 155-5 PN HF SCALANCE X200-4P IRT SCALANCE XC-200 SCALANCE X202-2IRT SCALANCE XR324-12M (230V, ports on front)SCALANCE XR324-4M EEC (2x 24V, ports on front)

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.55% / 68.43%

7 Day CHG~0.00%

Published-11 Feb, 2020 | 15:36

Updated-05 Aug, 2024 | 00:05

Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2025-59375

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.10% / 27.46%

7 Day CHG~0.00%

Published-15 Sep, 2025 | 00:00

Updated-12 May, 2026 | 13:17

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

Vendor-libexpat_project libexpat project Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-25664

Matching Score-8

Assigner-Siemens

Product-nucleus_readystart_v3 nucleus_readystart_v4 capital_vstar nucleus_net nucleus_source_code Nucleus Source Code Nucleus NET Capital Embedded AR Classic 431-422 Capital Embedded AR Classic R20-11 Nucleus ReadyStart V4 Nucleus ReadyStart V3

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.71% / 72.63%

7 Day CHG~0.00%

Published-22 Apr, 2021 | 20:42

Updated-11 Mar, 2025 | 10:15

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values.

Vendor-Siemens AG

CWE ID-CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

CVE-2026-21945

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.5||HIGH

EPSS-0.09% / 25.34%

7 Day CHG~0.00%

Published-20 Jan, 2026 | 21:56

Updated-12 May, 2026 | 13:17

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vendor-Oracle Corporation Siemens AG

Product-graalvm_for_jdk jdk jre graalvm Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition Oracle Java SE SIMATIC CN 4100

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-25662

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.74% / 73.33%

7 Day CHG~0.00%

Published-12 May, 2021 | 13:18

Updated-02 Jun, 2026 | 20:16

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Outdoor Panels V16 7\" & 15\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels V15 4\" - 22\" (incl. SIPLUS variants) (All versions < V15.1 Update 6), SIMATIC HMI Comfort Panels V16 4\" - 22\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels V15 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V15.1 Update 6), SIMATIC HMI KTP Mobile Panels V16 KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced V15 (All versions < V15.1 Update 6), SIMATIC WinCC Runtime Advanced V16 (All versions < V16 Update 4). SmartVNC client fails to handle an exception properly if the program execution process is modified after sending a packet from the server, which could result in a Denial-of-Service condition.

Vendor-Siemens AG

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2022-38767

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.26% / 49.93%

7 Day CHG~0.00%

Published-25 Nov, 2022 | 00:00

Updated-14 Apr, 2026 | 10:16

An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.

Vendor-windriver n/a Siemens AG

CVE-2019-12258

Matching Score-8

Assigner-MITRE Corporation

Product-power_meter_9810_firmware hirschmann_rsp20 ruggedcom_win7025_firmware hirschmann_ees25 sonicos hirschmann_grs1030 hirschmann_grs1142 ruggedcom_win7018_firmware hirschmann_rspe32 hirschmann_grs1130 garrettcom_magnum_dx940e hirschmann_rspe35 hirschmann_eesx20 hirschmann_rspe37 ruggedcom_win7018 power_meter_9410_firmware hirschmann_grs1042 siprotec_5_firmware ruggedcom_win7000 ruggedcom_win7200 hirschmann_rsp35 garrettcom_magnum_dx940e_firmware e-series_santricity_os_controller vxworks hirschmann_msp40 hirschmann_octopus_os3 hirschmann_rsp30 hirschmann_dragon_mach4000 hirschmann_dragon_mach4500 hirschmann_msp32 hirschmann_rsp25 hirschmann_rail_switch_power_smart hirschmann_eesx30 hirschmann_grs1020 hirschmann_rail_switch_power_lite hirschmann_eagle20 hirschmann_eagle30 hirschmann_hios ruggedcom_win7025 hirschmann_rspe30 hirschmann_eagle_one ruggedcom_win7200_firmware siprotec_5 hirschmann_ees20 hirschmann_red25 power_meter_9410 power_meter_9810 ruggedcom_win7000_firmware hirschmann_msp30 hirschmann_grs1120 n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-5.90% / 90.78%

7 Day CHG~0.00%

Published-09 Aug, 2019 | 20:00

Updated-04 Aug, 2024 | 23:17

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.

Vendor-belden windriver n/a NetApp, Inc.Siemens AG SonicWall Inc.

CWE ID-CWE-384

Session Fixation

CVE-2019-10923

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.47% / 64.91%

7 Day CHG~0.00%

Published-10 Oct, 2019 | 13:49

Updated-11 Feb, 2025 | 10:26

An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-25219

Matching Score-8

Matching Score-8

Vendor-Internet Systems Consortium, Inc.Debian GNU/Linux NetApp, Inc.Oracle Corporation Siemens AG Fedora Project

CVSS Score-5.3||MEDIUM

EPSS-1.04% / 77.80%

7 Day CHG~0.00%

Published-27 Oct, 2021 | 21:10

Updated-16 Sep, 2024 | 17:33

Lame cache can be abused to severely degrade resolver performance

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.

CVE-2021-25143

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

Matching Score-8

Assigner-Hewlett Packard Enterprise (HPE)

CVSS Score-7.5||HIGH

EPSS-0.66% / 71.58%

7 Day CHG~0.00%

Published-29 Mar, 2021 | 19:03

Updated-03 Aug, 2024 | 19:56

A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.

Vendor-n/a Siemens AG Aruba Networks

Product-scalance_w1750d_firmware instant scalance_w1750d Aruba Instant Access Points

CVE-2021-25215

Matching Score-8

Matching Score-8

Vendor-Internet Systems Consortium, Inc.Debian GNU/Linux NetApp, Inc.Oracle Corporation Siemens AG Fedora Project

CVSS Score-7.5||HIGH

EPSS-2.25% / 84.92%

7 Day CHG+0.76%

Published-29 Apr, 2021 | 00:55

Updated-16 Sep, 2024 | 22:02

An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.

CWE ID-CWE-617

Reachable Assertion

CVE-2022-39158

Matching Score-8

Assigner-Siemens

Product-ruggedcom_rsg2100_\(32m\)ruggedcom_rsg2300p ruggedcom_rsg907r ruggedcom_rst916p ruggedcom_rsg910c ruggedcom_rsl910 ruggedcom_rs900_\(32m\)ruggedcom_ros ruggedcom_rsg920p ruggedcom_rsg2300 ruggedcom_rs416v2 ruggedcom_rst916c ruggedcom_rst2228 ruggedcom_rst2228p ruggedcom_rmc8388 ruggedcom_rsg909r ruggedcom_rsg908c ruggedcom_rs416pv2 ruggedcom_rsg2488 ruggedcom_rsg2288 ruggedcom_rs900g_\(32m\)RUGGEDCOM RS8000 RUGGEDCOM RS900L RUGGEDCOM RSG2300 V4.X RUGGEDCOM RS900MNC-STND-XX-C01 RUGGEDCOM RSG920P V4.X RUGGEDCOM RS401NC RUGGEDCOM RSG2100PNC (32M) V4.X RUGGEDCOM RS920LNC RUGGEDCOM RS910L RUGGEDCOM RS930W RUGGEDCOM RSG2100NC(32M) V5.X RUGGEDCOM RSG2100 (32M) V5.X RUGGEDCOM RSG2288NC V5.X RUGGEDCOM RS416Pv2 V4.X RUGGEDCOM RS1600 RUGGEDCOM i801NC RUGGEDCOM RS940G RUGGEDCOM RSG2100NC(32M) V4.X RUGGEDCOM i800NC RUGGEDCOM RS910 RUGGEDCOM RSG908C RUGGEDCOM RS8000NC RUGGEDCOM RS400F RUGGEDCOM RS900NC(32M) V4.X RUGGEDCOM RS920L RUGGEDCOM RMC8388 V4.X RUGGEDCOM RS8000H RUGGEDCOM RS900LNC RUGGEDCOM RS8000T RUGGEDCOM RS910NC RUGGEDCOM RS416PF RUGGEDCOM RS900G RUGGEDCOM M2100F RUGGEDCOM RS900M-STND-XX RUGGEDCOM RS900W RUGGEDCOM RMC8388 V5.X RUGGEDCOM RS900MNC-STND-XX RUGGEDCOM RSG2100PNC (32M) V5.X RUGGEDCOM RSG910C RUGGEDCOM RSG2300PF RUGGEDCOM RSG2288 V4.X RUGGEDCOM RS1600NC RUGGEDCOM RS969 RUGGEDCOM RS900 (32M) V4.X RUGGEDCOM RSG909R RUGGEDCOM RS416F RUGGEDCOM RS900GPF RUGGEDCOM RSG2100P RUGGEDCOM RS930LNC RUGGEDCOM RS416P RUGGEDCOM RSG920P V5.X RUGGEDCOM RSG2200NC RUGGEDCOM RS8000HNC RUGGEDCOM RSG2300PNC V5.X RUGGEDCOM RSG2288 V5.X RUGGEDCOM RS1600F RUGGEDCOM RS416NC RUGGEDCOM RS930L RUGGEDCOM RSG907R RUGGEDCOM RSG2300P V5.X RUGGEDCOM RS910W RUGGEDCOM RSG2300 V5.X RUGGEDCOM RS940GNC RUGGEDCOM RS900GNC RUGGEDCOM RSG2100P (32M) V4.X RUGGEDCOM RMC8388NC V5.X RUGGEDCOM RS940GF RUGGEDCOM RS910LNC RUGGEDCOM RSG2288NC V4.X RUGGEDCOM RSG2488 V5.X RUGGEDCOM RMC30 RUGGEDCOM RS900GF RUGGEDCOM RS8000ANC RUGGEDCOM RMC8388NC V4.X RUGGEDCOM RS1600T RUGGEDCOM M969F RUGGEDCOM RS900G (32M) V5.X RUGGEDCOM RS400NC RUGGEDCOM RS900MNC-GETS-C01 RUGGEDCOM RS900M-GETS-C01 RUGGEDCOM RSG2488NC V4.X RUGGEDCOM M2200F RUGGEDCOM RP110 RUGGEDCOM i801 RUGGEDCOM RS416v2 V4.X RUGGEDCOM RS416NCv2 V4.X RUGGEDCOM RS8000TNC RUGGEDCOM RSG2300P V4.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RS920W RUGGEDCOM RS900F RUGGEDCOM M2200 RUGGEDCOM RS900MNC-GETS-XX RUGGEDCOM RSG2300NC V5.X RUGGEDCOM RS900GNC(32M) V4.X RUGGEDCOM RS900 RUGGEDCOM RSG2100 RUGGEDCOM M969NC RUGGEDCOM RS416PNC RUGGEDCOM RS1600FNC RUGGEDCOM RS400 RUGGEDCOM RS900NC(32M) V5.X RUGGEDCOM RS1600TNC RUGGEDCOM RS900G (32M) V4.X RUGGEDCOM M969 RUGGEDCOM RS416PNCv2 V4.X RUGGEDCOM M2200NC RUGGEDCOM RS8000A RUGGEDCOM i803 RUGGEDCOM RSG2100PNC RUGGEDCOM RSG920PNC V5.X RUGGEDCOM RSG2100NC RUGGEDCOM RSG2488F RUGGEDCOM RP110NC RUGGEDCOM RSG2200 RUGGEDCOM RSG2488NC V5.X RUGGEDCOM RSL910NC RUGGEDCOM RS969NC RUGGEDCOM RS416 RUGGEDCOM RST2228P RUGGEDCOM i800 RUGGEDCOM RS900M-STND-C01 RUGGEDCOM RS900M-GETS-XX RUGGEDCOM RST916P RUGGEDCOM RS416PNCv2 V5.X RUGGEDCOM RS416NCv2 V5.X RUGGEDCOM RSG2100 (32M) V4.X RUGGEDCOM RSL910 RUGGEDCOM RSG2100PF RUGGEDCOM RS900GP RUGGEDCOM RST916C RUGGEDCOM RS900GPNC RUGGEDCOM RSG2100F RUGGEDCOM RSG2488 V4.X RUGGEDCOM i802 RUGGEDCOM RS900GNC(32M) V5.X RUGGEDCOM RST2228 RUGGEDCOM RS401 RUGGEDCOM RSG2300NC V4.X RUGGEDCOM RSG920PNC V4.X RUGGEDCOM i802NC RUGGEDCOM i803NC RUGGEDCOM M2100 RUGGEDCOM RSG2300F RUGGEDCOM RSG2300PNC V4.X RUGGEDCOM RS900NC RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RMC30NC RUGGEDCOM RS900 (32M) V5.X RUGGEDCOM RSG2200F RUGGEDCOM M2100NC RUGGEDCOM RSG2100P (32M) V5.X

Matching Score-8

Assigner-Siemens

CVSS Score-5.3||MEDIUM

EPSS-0.86% / 75.40%

7 Day CHG~0.00%

Published-13 Sep, 2022 | 00:00

Updated-12 Aug, 2025 | 12:15

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969, RUGGEDCOM M969F, RUGGEDCOM M969NC, RUGGEDCOM RMC30, RUGGEDCOM RMC30NC, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RMC8388NC V4.X, RUGGEDCOM RMC8388NC V5.X, RUGGEDCOM RP110, RUGGEDCOM RP110NC, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600FNC, RUGGEDCOM RS1600NC, RUGGEDCOM RS1600T, RUGGEDCOM RS1600TNC, RUGGEDCOM RS400, RUGGEDCOM RS400F, RUGGEDCOM RS400NC, RUGGEDCOM RS401, RUGGEDCOM RS401NC, RUGGEDCOM RS416, RUGGEDCOM RS416F, RUGGEDCOM RS416NC, RUGGEDCOM RS416NCv2 V4.X, RUGGEDCOM RS416NCv2 V5.X, RUGGEDCOM RS416P, RUGGEDCOM RS416PF, RUGGEDCOM RS416PNC, RUGGEDCOM RS416PNCv2 V4.X, RUGGEDCOM RS416PNCv2 V5.X, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000ANC, RUGGEDCOM RS8000H, RUGGEDCOM RS8000HNC, RUGGEDCOM RS8000NC, RUGGEDCOM RS8000T, RUGGEDCOM RS8000TNC, RUGGEDCOM RS900, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900F, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GF, RUGGEDCOM RS900GNC, RUGGEDCOM RS900GNC(32M) V4.X, RUGGEDCOM RS900GNC(32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900GPF, RUGGEDCOM RS900GPNC, RUGGEDCOM RS900L, RUGGEDCOM RS900LNC, RUGGEDCOM RS900M-GETS-C01, RUGGEDCOM RS900M-GETS-XX, RUGGEDCOM RS900M-STND-C01, RUGGEDCOM RS900M-STND-XX, RUGGEDCOM RS900MNC-GETS-C01, RUGGEDCOM RS900MNC-GETS-XX, RUGGEDCOM RS900MNC-STND-XX, RUGGEDCOM RS900MNC-STND-XX-C01, RUGGEDCOM RS900NC, RUGGEDCOM RS900NC(32M) V4.X, RUGGEDCOM RS900NC(32M) V5.X, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910LNC, RUGGEDCOM RS910NC, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920LNC, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930LNC, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS940GF, RUGGEDCOM RS940GNC, RUGGEDCOM RS969, RUGGEDCOM RS969NC, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100F, RUGGEDCOM RSG2100NC, RUGGEDCOM RSG2100NC(32M) V4.X, RUGGEDCOM RSG2100NC(32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2100PF, RUGGEDCOM RSG2100PNC, RUGGEDCOM RSG2100PNC (32M) V4.X, RUGGEDCOM RSG2100PNC (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2200F, RUGGEDCOM RSG2200NC, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2288NC V4.X, RUGGEDCOM RSG2288NC V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300F, RUGGEDCOM RSG2300NC V4.X, RUGGEDCOM RSG2300NC V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2300PF, RUGGEDCOM RSG2300PNC V4.X, RUGGEDCOM RSG2300PNC V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG2488F, RUGGEDCOM RSG2488NC V4.X, RUGGEDCOM RSG2488NC V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSG920PNC V4.X, RUGGEDCOM RSG920PNC V5.X, RUGGEDCOM RSL910, RUGGEDCOM RSL910NC, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P. Affected devices improperly handle partial HTTP requests which makes them vulnerable to slowloris attacks. This could allow a remote attacker to create a denial of service condition that persists until the attack ends.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-23362

Matching Score-8

Assigner-Snyk

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-8

Assigner-Snyk

CVSS Score-5.3||MEDIUM

EPSS-0.55% / 68.49%

7 Day CHG~0.00%

Published-23 Mar, 2021 | 16:20

Updated-17 Sep, 2024 | 03:02

Regular Expression Denial of Service (ReDoS)

The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity.

Vendor-npmjs n/a Siemens AG

Product-sinec_infrastructure_network_services hosted-git-info hosted-git-info

CWE ID-CWE-1333

Inefficient Regular Expression Complexity

CVE-2019-10953

Matching Score-8

Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)

Matching Score-8

CVSS Score-7.5||HIGH

EPSS-0.48% / 65.64%

7 Day CHG+0.04%

Published-17 Apr, 2019 | 14:02

Updated-04 Jun, 2026 | 20:16

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Researchers have found some controllers are susceptible to a denial-of-service attack due to a flood of network packets.

Vendor-wago WAGO Siemens AG Schneider Electric SE ABB Phoenix Contact GmbH & Co. KG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2021-22926

Matching Score-8

Assigner-HackerOne

Matching Score-8

Assigner-HackerOne

CVSS Score-7.5||HIGH

EPSS-0.66% / 71.45%

7 Day CHG~0.00%

Published-05 Aug, 2021 | 00:00

Updated-28 May, 2026 | 21:16

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file, it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`), a malicious user can create a file name with the same name as the app wants to use by name, and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.

Vendor-n/a Oracle Corporation NetApp, Inc.Siemens AG CURL Splunk LLC (Cisco Systems, Inc.)

CWE ID-CWE-295

Improper Certificate Validation

CVE-2024-46891

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-6.9||MEDIUM

EPSS-1.07% / 78.12%

7 Day CHG~0.00%

Published-12 Nov, 2024 | 12:49

Updated-20 Aug, 2025 | 19:11

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial of service condition.

Vendor-Siemens AG

Product-sinec_ins SINEC INS sinec_ins

CWE ID-CWE-125

Out-of-bounds Read

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-10936

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.33% / 80.34%

7 Day CHG~0.00%

Published-10 Oct, 2019 | 00:00

Updated-04 Aug, 2024 | 22:40

Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-10937

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.77% / 73.92%

7 Day CHG~0.00%

Published-13 Sep, 2019 | 16:38

Updated-04 Aug, 2024 | 22:40

A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-simatic_tdc_cp51m1_firmware simatic_tdc_cp51m1 SIMATIC TDC CP51M1

CWE ID-CWE-20

Improper Input Validation

CVE-2021-22883

Matching Score-8

Assigner-HackerOne

Vendor-Node.js (OpenJS Foundation)Oracle Corporation NetApp, Inc.Siemens AG Fedora Project

Matching Score-8

Assigner-HackerOne

CVSS Score-7.5||HIGH

EPSS-89.43% / 99.57%

7 Day CHG~0.00%

Published-03 Mar, 2021 | 17:38

Updated-30 Apr, 2025 | 22:24

Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.

Product-sinec_infrastructure_network_services peoplesoft_enterprise_peopletools graalvm e-series_performance_analyzer mysql_cluster nosql_database fedora jd_edwards_enterpriseone_tools node.js Node

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2019-19281

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.63% / 70.70%

7 Day CHG~0.00%

Published-10 Mar, 2020 | 19:16

Updated-05 Aug, 2024 | 02:09

A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.

Vendor-Siemens AG

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2019-18318

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.48% / 65.73%

7 Day CHG~0.00%

Published-12 Dec, 2019 | 19:08

Updated-05 Aug, 2024 | 01:54

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server can cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from CVE-2019-18317 and CVE-2019-18319. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.

Vendor-Siemens AG

Product-sppa-t3000_application_server SPPA-T3000 Application Server

CWE ID-CWE-287

Improper Authentication

CVE-2024-45490

Matching Score-8

Assigner-MITRE Corporation

Product-libexpat n/a SIPLUS S7-1500 CPU 1518-4 PN/DP MFP RUGGEDCOM RST2428P SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP libexpat SIMATIC S7-1500 CPU 1518-4 PN/DP MFP SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family SCALANCE XCM-/XRM-/XCH-/XRH-300 family

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.61% / 70.27%

7 Day CHG~0.00%

Published-30 Aug, 2024 | 00:00

Updated-12 May, 2026 | 12:17

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

Vendor-libexpat_project n/a libexpat_project Siemens AG

CWE ID-CWE-190

Integer Overflow or Wraparound

CWE ID-CWE-611

Improper Restriction of XML External Entity Reference

CVE-2016-2518

Matching Score-8

Assigner-MITRE Corporation

Product-debian_linux freebsd oncommand_performance_manager ntp enterprise_linux_desktop enterprise_linux_server_tus oncommand_balance communications_user_data_repository enterprise_linux_server_eus enterprise_linux_server_aus data_ontap simatic_net_cp_443-1_opc_ua enterprise_linux_server oncommand_unified_manager_for_clustered_data_ontap enterprise_linux_workstation clustered_data_ontap linux simatic_net_cp_443-1_opc_ua_firmware n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.3||MEDIUM

EPSS-3.48% / 87.82%

7 Day CHG~0.00%

Published-30 Jan, 2017 | 21:00

Updated-13 May, 2026 | 00:24

The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Vendor-ntp n/a FreeBSD Foundation Oracle Corporation Siemens AG Red Hat, Inc.Debian GNU/Linux NetApp, Inc.

CWE ID-CWE-125

Out-of-bounds Read

CVE-2022-36324

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.54% / 81.71%

7 Day CHG~0.00%

Published-10 Aug, 2022 | 11:18

Updated-14 Apr, 2026 | 09:16

Affected devices do not properly handle the renegotiation of SSL/TLS parameters. This could allow an unauthenticated remote attacker to bypass the TCP brute force prevention and lead to a denial of service condition for the duration of the attack.

Vendor-Siemens AG

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2022-36362

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.81% / 74.60%

7 Day CHG~0.00%

Published-11 Oct, 2022 | 00:00

Updated-08 Oct, 2024 | 09:15

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA2) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA2) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA2) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA2) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA2) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA2) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA2) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA2) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA2) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA2) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA2) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA2) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA2) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA2) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA2) (All versions). Affected devices do not conduct certain validations when interacting with them. This could allow an unauthenticated remote attacker to manipulate the devices IP address, which means the device would not be reachable and could only be recovered by power cycling the device.

Vendor-Siemens AG

CWE ID-CWE-20

Improper Input Validation

CVE-2019-13921

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.37% / 59.31%

7 Day CHG~0.00%

Published-10 Oct, 2019 | 13:49

Updated-05 Aug, 2024 | 00:05

A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is sent to the executing service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the service provided by the software.

Vendor-Siemens AG

Product-simatic_winac_rtx_\(f\)_2010 SIMATIC WinAC RTX (F) 2010

CWE ID-CWE-410

Insufficient Resource Pool

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2021-20094

Matching Score-8

Assigner-Tenable Network Security, Inc.

Matching Score-8

Assigner-Tenable Network Security, Inc.

CVSS Score-7.5||HIGH

EPSS-6.77% / 91.49%

7 Day CHG~0.00%

Published-16 Jun, 2021 | 11:09

Updated-03 Aug, 2024 | 17:30

A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.

Vendor-wibu n/a Siemens AG

Product-sicam_230 pss_cape sicam_230_firmware codemeter Wibu-Systems CodeMeter

CWE ID-CWE-125

Out-of-bounds Read

CVE-2025-40820

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-8.7||HIGH

EPSS-0.10% / 27.93%

7 Day CHG~0.00%

Published-09 Dec, 2025 | 10:44

Updated-09 Dec, 2025 | 18:36

Affected products do not properly enforce TCP sequence number validation in specific scenarios but accept values within a broad range. This could allow an unauthenticated remote attacker e.g. to interfere with connection setup, potentially leading to a denial of service. The attack succeeds only if an attacker can inject IP packets with spoofed addresses at precisely timed moments, and it affects only TCP-based services.

Vendor-Siemens AG

CWE ID-CWE-940

Improper Verification of Source of a Communication Channel

CVE-2022-33736

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-0.60% / 69.91%

7 Day CHG~0.00%

Published-12 Jul, 2022 | 10:06

Updated-03 Aug, 2024 | 08:09

A vulnerability has been identified in Opcenter Quality V13.1 (All versions < V13.1.20220624), Opcenter Quality V13.2 (All versions < V13.2.20220624). The affected applications do not properly validate login information during authentication. This could lead to denial of service condition for existing users or allow unauthenticated remote attackers to successfully login without credentials.

Vendor-Siemens AG

Product-opcenter_quality Opcenter Quality V13.1 Opcenter Quality V13.2

CWE ID-CWE-303

Incorrect Implementation of Authentication Algorithm

CWE ID-CWE-287

Improper Authentication

CVE-2018-4837

Matching Score-8

Assigner-Siemens

Matching Score-8

Assigner-Siemens

CVSS Score-7.5||HIGH

EPSS-1.48% / 81.37%

7 Day CHG~0.00%

Published-25 Jan, 2018 | 14:00

Updated-16 Sep, 2024 | 16:22

A vulnerability has been identified in TeleControl Server Basic < V3.1. An attacker with access to the TeleControl Server Basic's webserver (port 80/tcp or 443/tcp) could cause a Denial-of-Service condition on the web server. The remaining functionality of the TeleControl Server Basic is not affected by the Denial-of-Service condition.

Vendor-Siemens AG

Product-telecontrol_server_basic TeleControl Server Basic

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2018-3658

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-5.3||MEDIUM

EPSS-1.13% / 78.67%

7 Day CHG~0.00%

Published-12 Sep, 2018 | 19:00

Updated-16 Sep, 2024 | 22:35

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to potentially cause a partial denial of service via network access.

Vendor-Intel Corporation Siemens AG

CWE ID-CWE-772

Missing Release of Resource after Effective Lifetime

CVE-2020-9327

Matching Score-8

Assigner-MITRE Corporation

Product-sinec_infrastructure_network_services ubuntu_linux communications_messaging_server cloud_backup sqlite communications_network_charging_and_control zfs_storage_appliance_kit outside_in_technology hyperion_infrastructure_technology enterprise_manager_ops_center mysql_workbench n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.95% / 76.77%

7 Day CHG~0.00%

Published-21 Feb, 2020 | 21:25

Updated-04 Aug, 2024 | 10:26

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Vendor-sqlite n/a NetApp, Inc.Oracle Corporation Canonical Ltd.Siemens AG

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2020-8285

Matching Score-8

Assigner-HackerOne