Siemens vulnerabilities16 known to be exploited.
Siemens has 2,111 published vulnerabilities across 4,244 products in our catalogue. 16 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Teamcenter Visualization, with 188. If you run Siemens software, patch the exploited flaws first.
The most recent Siemens flaw added to the known-exploited list is CVE-2021-45046, on 1 May 2023. We keep watching the known-exploited list.
Which Siemens products have the most vulnerabilities?
Teamcenter Visualization leads with 188 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Siemens vulnerabilities are being exploited?
16 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.0Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain...
- 7.8Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.
- 7.5Microsoft Windows SMBv1 Information Disclosure Vulnerability
The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.
- 7.5OpenSSL Information Disclosure Vulnerability
The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.
- 7.8Linux Kernel Privilege Escalation Vulnerability
Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system.
- 8.1Microsoft SMBv1 Server Remote Code Execution Vulnerability
The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.
- 9.8Spring Framework JDK 9+ Remote Code Execution Vulnerability
Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.
- 8.8Microsoft Windows SMB Remote Code Execution Vulnerability
The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.
Which Siemens flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends specially crafted...
- >99%
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via...
- 95%CVE-2014-0224High
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master...
- 94%CVE-2017-5753Medium
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
- 92%
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM).
All Siemens products we track.
394 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Teamcenter Visualizationteamcenter_visualization188 vulnerabilities57 versions
- Jt2gojt2go166 vulnerabilities16 versions
- Tecnomatix Plant Simulationtecnomatix_plant_simulation85 vulnerabilities20 versions
- Telecontrol Server Basictelecontrol_server_basic75 vulnerabilities5 versions
- Simcenter Femapsimcenter_femap70 vulnerabilities21 versions
- Sinema Remote Connect Serversinema_remote_connect_server70 vulnerabilities8 versions
- Sinec Infrastructure Network Servicessinec_infrastructure_network_services68 vulnerabilities2 versions
- Scalance W1750d Firmwarescalance_w1750d_firmware62 vulnerabilities5 versions
- Parasolidparasolid52 vulnerabilities40 versions
- Solid Edgesolid_edge47 vulnerabilities5 versions
- Winccwincc43 vulnerabilities11 versions
- Sinec Nmssinec_nms38 vulnerabilities5 versions
- Sinec Inssinec_ins37 vulnerabilities2 versions
- Solid Edge Se2023solid_edge_se202336 vulnerabilities8 versions
- Jt Utilitiesjt_utilities32 vulnerabilities3 versions
- Comoscomos31 vulnerabilities19 versions
- Simatic Winccsimatic_wincc30 vulnerabilities16 versions
- Jt Open Toolkitjt_open_toolkit29 vulnerabilities3 versions
- Scalance Lpe9403 Firmwarescalance_lpe9403_firmware27 vulnerabilities1 version
- Simatic Pcs 7simatic_pcs_727 vulnerabilities9 versions
- Nucleus Netnucleus_net25 vulnerabilities1 version
- Simatic Pcs Neosimatic_pcs_neo25 vulnerabilities5 versions
- Simatic Pcs7simatic_pcs725 vulnerabilities4 versions
- Scalance S615 Firmwarescalance_s615_firmware24 vulnerabilities10 versions
This directory lists the 394 Siemens products with at least one tracked version, of 4,244 in our catalogue.
Running Siemens? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.
- Matched to
- Siemens on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 2,111 published vulnerabilities across 4,244 products and 2,771 versions from Siemens. The most recent Siemens flaw added to the known-exploited list is CVE-2021-45046, on 1 May 2023.
16 Siemens vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2021-45046, CVE-2021-4034 and CVE-2017-0147. The full list is on this page.
Teamcenter Visualization, with 188 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Siemens products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.