CVE Program partner

siemens

Siemens

API
CVEs, 365 days1651,908 all time, 34 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationSiemens
RoleCNA
TypeVendor
Reports toicscert → CISA
ScopeSiemens issues only.
Advisorieshttps://www.siemens.com/global/en/products/services/cert.html#SiemensSecurityAdvisories

Latest CVEs · RSS

  • CVE-2026-110936 2026-10-15 · CVSS 6.7
    A vulnerability has been identified in Siemens Software Center (All versions). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled
  • CVE-2026-102076 2026-10-13 · CVSS 7.5
    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All v
  • CVE-2026-102075 2026-10-13 · CVSS 7.5
    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All v
  • CVE-2026-102074 2026-10-13 · CVSS 7.5
    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All v
  • CVE-2026-102073 2026-10-13 · CVSS 8.2
    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All v
  • CVE-2026-89208 2026-10-13 · CVSS 5.3
    A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC
  • CVE-2026-89206 2026-10-13 · CVSS 6.3
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for r
  • CVE-2026-89205 2026-10-13 · CVSS 6.3
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for r
  • CVE-2026-89204 2026-10-13 · CVSS 5.4
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for s
  • CVE-2026-89203 2026-10-13 · CVSS 4.3
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, a
  • CVE-2026-89202 2026-10-13 · CVSS 6.5
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device discon
  • CVE-2026-89201 2026-10-13 · CVSS 7.5
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or
  • CVE-2026-89200 2026-10-13 · CVSS 6.7
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Val
  • CVE-2026-89199 2026-10-13 · CVSS 8.8
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration ite
  • CVE-2026-89198 2026-10-13 · CVSS 8.8
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware
  • CVE-2026-89197 2026-10-13 · CVSS 8.8
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field
  • CVE-2026-89196 2026-10-13 · CVSS 8.8
    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names p
  • CVE-2026-85115 2026-10-13 · CVSS 5.5
    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact P
  • CVE-2026-85114 2026-10-13 · CVSS 7.5
    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate
  • CVE-2026-78557 2026-10-13 · CVSS 8.3
    A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data receive
  • CVE-2026-78556 2026-10-13 · CVSS 7.4
    A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certi
  • CVE-2026-72895 2026-10-13 · CVSS 7.7
    A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / I
  • CVE-2026-63357 2026-10-13 · CVSS 6.1
    Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This co
  • CVE-2026-63356 2026-10-13 · CVSS 6.1
    Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace pag
  • CVE-2026-63355 2026-10-13 · CVSS 6.1
    Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This

All CVE Program partners