Vulnerability index

Browse CVEs

1,648 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sinumerik 808d V4.7 Firmware MEDIUM 6.6
CVE-2018-11461

A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4…

Fix: after 4.8
Fix from $1,600 2018-12-12
Simatic Et 200sp Firmware HIGH 7.5
CVE-2018-13805

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All…

Fix: 2.5+
Fix from $1,950 2018-10-10
Rox Ii Firmware HIGH 7.2
CVE-2018-13802

A vulnerability has been identified in ROX II (All versions < V2.12.1). An authenticated attacker with a high-privileged user account access via SSH …

Fix: 2.12.1+
Fix from $1,950 2018-10-10
Rox Ii Firmware HIGH 8.8
CVE-2018-13801

A vulnerability has been identified in ROX II (All versions < V2.12.1). An attacker with network access to port 22/tcp and valid low-privileged user …

Fix: 2.12.1+
Fix from $1,950 2018-10-10
Simatic S7 1200 V4 Firmware HIGH 7.3
CVE-2018-13800

A vulnerability has been identified in SIMATIC S7-1200 CPU family version 4 (All versions < V4.2.3). The web interface could allow a Cross-Site Reque…

Fix: 4.2.3+
Fix from $1,950 2018-10-10
Simatic Field Pg M5 Firmware MEDIUM 6.7
CVE-2018-3657

Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged user to potentially execute arbit…

Fix: 19.01.14 / 19.02.11+
Fix from $1,600 2018-09-12
Simatic Field Pg M5 Firmware MEDIUM 5.3
CVE-2018-3658

Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with Intel AMT provisioned to pote…

Fix: 19.01.14 / 19.02.11+
Fix from $1,600 2018-09-12
Scalance X408 Firmware HIGH 8.6
CVE-2018-13807

A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SCALANCE X414 (All versions). Th…

Fix: 4.0.0+
Fix from $1,950 2018-09-12
Td Keypad Designer HIGH 7.8
CVE-2018-13806

A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists in all versions of SIEMENS TD …

Mitigation only
Fix from $1,950 2018-09-12
Simatic Wincc Open Architecture CRITICAL 9.1
CVE-2018-13799

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the a…

Fix: after 3.14
Fix from $2,300 2018-09-12
Automation License Manager HIGH 8.8
CVE-2018-11455EPSS 5%

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A …

Fix: 5.3.4.4 / 6.0.1+
Fix from $1,950 2018-08-07
Simatic Step 7 \(tia Portal\) HIGH 8.6
CVE-2018-11454

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) a…

No fix yet
Fix from $1,950 2018-08-07
Simatic Step 7 \(tia Portal\) HIGH 7.8
CVE-2018-11453

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions), SIMATIC STEP 7 (TIA Portal) a…

Mitigation only
Fix from $1,950 2018-08-07
Automation License Manager MEDIUM 5.8
CVE-2018-11456

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network access to the device could sen…

Fix: 5.3.4.4+
Fix from $1,600 2018-08-07
Dnp3 Tcp Firmware HIGH 7.5
CVE-2018-11451

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for …

Fix: 4.33 / 7.80+
Fix from $1,950 2018-07-23
Dnp3 Tcp Firmware HIGH 7.5
CVE-2018-11452

A vulnerability has been identified in Firmware variant IEC 61850 for EN100 Ethernet module (All versions < V4.33), Firmware variant PROFINET IO for …

Fix: 4.33 / 7.80+
Fix from $1,950 2018-07-23
Teamcenter Product Lifecycle Management MEDIUM 6.1
CVE-2018-11450

A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login po…

Fix: after 9.1.2.5
Fix from $1,600 2018-07-09
Ec 61850 System Configurator Firmware HIGH 7.8
CVE-2018-4858

A vulnerability has been identified in IEC 61850 system configurator (All versions < V5.80), DIGSI 5 (affected as IEC 61850 system configurator is in…

Fix: 3.11 / 5.80+
Fix from $1,950 2018-07-09
Fin Stack MEDIUM 6.1
CVE-2017-11175

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.

No fix yet
Fix from $1,600 2018-07-05
Siclock Tc400 Firmware CRITICAL 9.8
CVE-2018-4852

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device c…

Mitigation only
Fix from $2,300 2018-07-03
Siclock Tc400 Firmware CRITICAL 9.8
CVE-2018-4853

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp …

Mitigation only
Fix from $2,300 2018-07-03
Siclock Tc400 Firmware HIGH 8.8
CVE-2018-4854

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to port 69/udp …

Mitigation only
Fix from $1,950 2018-07-03
Siclock Tc400 Firmware HIGH 8.2
CVE-2018-4851

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). An attacker with network access to the device c…

Mitigation only
Fix from $1,950 2018-07-03
Siclock Tc400 Firmware MEDIUM 6.5
CVE-2018-4855

A vulnerability has been identified in SICLOCK TC100 (All versions) and SICLOCK TC400 (All versions). Unencrypted storage of passwords in the client …

Mitigation only
Fix from $1,600 2018-07-03
Rapidpoint 400 Firmware CRITICAL 9.8
CVE-2018-4846

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens …

Fix: 3.3+
Fix from $2,300 2018-06-26
Scalance M875 Firmware HIGH 8.8
CVE-2018-11447

A vulnerability has been identified in SCALANCE M875 (All versions). The web interface on port 443/tcp could allow a Cross-Site Request Forgery (CSRF…

Mitigation only
Fix from $1,950 2018-06-26
Rapidpoint 400 Firmware HIGH 8.8
CVE-2018-4845

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems (All versions_without_ use of Siemens …

Fix: 3.3+
Fix from $1,950 2018-06-26
Scalance M875 Firmware HIGH 7.8
CVE-2018-11449

A vulnerability has been identified in SCALANCE M875 (All versions). An attacker with access to the local file system might obtain passwords for admi…

Mitigation only
Fix from $1,950 2018-06-26
Scalance M875 Firmware HIGH 7.2
CVE-2018-4859

A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou…

Mitigation only
Fix from $1,950 2018-06-26
Scalance M875 Firmware HIGH 7.2
CVE-2018-4860

A vulnerability has been identified in SCALANCE M875 (All versions). An authenticated remote attacker with access to the web interface (443/tcp), cou…

Mitigation only
Fix from $1,950 2018-06-26