Vulnerability index

Browse CVEs

1,648 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sicam Pas\/pqs HIGH 7.3
CVE-2016-9156

A vulnerability in Siemens SICAM PAS (all versions before V8.09) could allow a remote attacker to upload, download, or delete files in certain parts …

Fix: 8.09+
Fix from $1,950 2016-12-05
Simatic S7 300 Cpu Firmware HIGH 8.8
CVE-2016-8673

A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl…

Mitigation only
Fix from $1,950 2016-11-23
Simatic Cp 343 1 Firmware MEDIUM 5.3
CVE-2016-8672

A vulnerability has been identified in SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variant) (All versions < V3.0.53), SIMATIC CP 443-1 Advanced (incl…

Mitigation only
Fix from $1,600 2016-11-23
Ccid1445 Dn18 Firmware CRITICAL 9.8
CVE-2016-9155

The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41_SP18_S1; CCPW3025, CCPW5025 prior to version 0.1…

Patch available
Fix from $2,300 2016-11-22
Simatic Cp 1543 1 Firmware HIGH 7.5
CVE-2016-8562 KEV

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special condi…

Fix: 2.0.28+
Fix from $1,950 2016-11-18
Simatic Cp 1543 1 Firmware MEDIUM 6.6
CVE-2016-8561

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Users with elevated…

Patch available
Fix from $1,600 2016-11-18
Primary Setup Tool MEDIUM 6.4
CVE-2016-7165

A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC IT Production Suite (All versions < V7.0 SP1 HFX 2…

Fix: after 14.0
Fix from $1,600 2016-11-15
Automation License Manager CRITICAL 9.1
CVE-2016-8565

Siemens Automation License Manager (ALM) before 5.3 SP3 allows remote attackers to write to files, rename files, create directories, or delete direct…

Fix: after 5.3
Fix from $2,300 2016-10-13
Automation License Manager MEDIUM 6.5
CVE-2016-8564

SQL injection vulnerability in Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to execute arbitrary SQL comm…

Fix: after 5.3
Fix from $1,600 2016-10-13
Automation License Manager HIGH 7.5
CVE-2016-8563

Siemens Automation License Manager (ALM) before 5.3 SP3 Update 1 allows remote attackers to cause a denial of service (ALM service outage) via crafte…

Fix: after 5.3
Fix from $1,950 2016-10-13
En100 Ethernet Module Firmware HIGH 8.8
CVE-2016-7114

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP …

Mitigation only
Fix from $1,950 2016-09-06
En100 Ethernet Module Firmware HIGH 7.5
CVE-2016-7113

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP …

Mitigation only
Fix from $1,950 2016-09-06
En100 Ethernet Module Firmware CRITICAL 9.8
CVE-2016-7112

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP …

Fix: after 4.28
Fix from $2,300 2016-09-06
Sinema Server HIGH 7.8
CVE-2016-6486

Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors.

Mitigation only
Fix from $1,950 2016-08-08
Sinema Remote Connect Server MEDIUM 6.1
CVE-2016-6204

Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to i…

Fix: after 1.1
Fix from $1,600 2016-07-22
Simatic Net Pc Software HIGH 7.5
CVE-2016-5874

Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outage) via crafted TCP packets.

Fix: after 13
Fix from $1,950 2016-07-22
Simatic Wincc HIGH 7.5
CVE-2016-5744

Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted packets.

Mitigation only
Fix from $1,950 2016-07-22
Simatic Batch CRITICAL 9.8
CVE-2016-5743EPSS 10%

Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distributed in SIMATIC PCS 7 through 8.1…

Fix: after 8.2
Fix from $2,300 2016-07-22
Sicam Pas\/pqs MEDIUM 6.7
CVE-2016-5848

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords …

Fix: after 8.07
Fix from $1,600 2016-07-04
Simatic S7 300 With Profitnet Support Firmware HIGH 7.5
CVE-2016-3949

Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmware before…

Mitigation only
Fix from $1,950 2016-06-27
Siprotec Firmware MEDIUM 5.3
CVE-2016-4785

A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP …

Mitigation only
Fix from $1,600 2016-05-31
Siprotec Firmware MEDIUM 5.3
CVE-2016-4784

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP …

Mitigation only
Fix from $1,600 2016-05-31
Scalance S613 MEDIUM 5.3
CVE-2016-3963EPSS 9%

Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port 443.

No fix yet
Fix from $1,600 2016-04-08
Simatic S7 Cpu 1200 Firmware MEDIUM 6.5
CVE-2016-2846

Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors.

Fix: after 3.0.2
Fix from $1,600 2016-03-16
Simatic S7 1500 Cpu Firmware MEDIUM 5.3
CVE-2016-2201

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.

Mitigation only
Fix from $1,600 2016-02-08
Simatic S7 1500 Cpu Firmware HIGH 7.5
CVE-2016-2200EPSS 6%

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TC…

Fix: after 1.8.2
Fix from $1,950 2016-02-08
Ozw672 Firmware MEDIUM 6.1
CVE-2016-1488

Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices …

Fix: after 5.2
Fix from $1,600 2016-01-30
Simatic Cp 443 1 Firmware HIGH 9.7
CVE-2015-8214

A vulnerability has been identified in SIMATIC NET CP 342-5 (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Advanced (incl. SIPLUS varia…

Fix: after 3.0
Fix from $1,950 2015-11-27
Compas MEDIUM 5.8
CVE-2015-5717

The Siemens COMPAS Mobile application before 1.6 for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-mi…

Fix: after 1.5
Fix from $1,600 2015-08-31
Simatic S7 1200 Cpu Firmware HIGH 7.5
CVE-2015-5698

Cross-site request forgery (CSRF) vulnerability in the web server on Siemens SIMATIC S7-1200 CPU devices with firmware before 4.1.3 allows remote att…

Fix: after 4.1.2
Fix from $1,950 2015-08-30