Siemens CVEs — known vulnerabilities

Jt2go MEDIUM 5.5

CVE-2020-27007

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications l…

Fix: 13.1.0.1+

Fix from $1,600 2021-02-09

Jt2go MEDIUM 5.5

CVE-2020-27008

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications l…

Fix: 13.1.0.1+

Fix from $1,600 2021-02-09

Simatic Hmi Comfort Panels Firmware CRITICAL 9.8

CVE-2020-15798EPSS 5%

A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl. SIPLUS variants) (All versions < V16 Update 3a), SIMATIC HMI KTP Mobile Pane…

Fix: 16.0+

Fix from $2,300 2021-02-09

Sinec Network Management System HIGH 8.1

CVE-2020-25237EPSS 21%

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1 Update 1), SINEMA Server (All versions < V14.0 SP2 Update 2). When uploadin…

Fix: 1.0 / 14.0+

Fix from $1,950 2021-02-09

Simatic Process Control System Neo HIGH 7.8

CVE-2020-25238

A vulnerability has been identified in PCS neo (Administration Console) (All versions < V3.1), TIA Portal (V15, V15.1 and V16). Manipulating certain …

Fix: 3.1+

Fix from $1,950 2021-02-09

Digsi 4 HIGH 7.8

CVE-2020-25245

A vulnerability has been identified in DIGSI 4 (All versions < V4.94 SP1 HF 1). Several folders in the %PATH% are writeable by normal users. As these…

Fix: 4.94+

Fix from $1,950 2021-02-09

Jt2go HIGH 7.8

CVE-2020-26999

A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications l…

Fix: 13.1.0.2+

Fix from $1,950 2021-02-09

Jt2go HIGH 7.8

CVE-2020-27000

A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications l…

Fix: 13.1.0.1+

Fix from $1,950 2021-02-09

Simatic Pcs 7 MEDIUM 5.5

CVE-2020-10048

A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an insecure password verificatio…

Fix: 7.5+

Fix from $1,600 2021-02-09

Jt2go MEDIUM 5.5

CVE-2020-26998

A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications l…

Fix: 13.1.0.2+

Fix from $1,600 2021-02-09

Scalance X200 4pirt Firmware MEDIUM 5.9

CVE-2020-28391

A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch fam…

Fix: 5.5.0+

Fix from $1,600 2021-01-12

Scalance Xr324 12m Firmware MEDIUM 5.9

CVE-2020-28395

A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions < V3.2.7), SCALANCE X-300 switch family (incl. X408 and SIPLUS N…

Fix: 4.1.0+

Fix from $1,600 2021-01-12

Opcenter Execution Core MEDIUM 5.5

CVE-2020-28390

A vulnerability has been identified in Opcenter Execution Core (V8.2), Opcenter Execution Core (V8.3). The application contains an information leakag…

Mitigation only

Fix from $1,600 2021-01-12

Jt2go HIGH 8.8

CVE-2020-26987

A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack …

Fix: 13.1.0+