Siemens

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-6864 1Siemens 1Ruggedcom Rox I May 13, 2026 Mar 29, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks.
CVE-2017-2689 1Siemens 1Ruggedcom Rox I May 13, 2026 Mar 29, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to obtain privileged file system access or change configuration settings.
CVE-2017-2688 1Siemens 1Ruggedcom Rox I May 13, 2026 Mar 29, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active...Show more The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with the privileges of an authenticated user, provided the targeted user has an active session and is induced into clicking on a malicious link or into visiting a malicious website, aka CSRF.Show less
CVE-2017-2687 1Siemens 1Ruggedcom Rox I May 13, 2026 Mar 29, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a mali...Show more Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected Cross-Site Scripting attacks if an unsuspecting user is induced to click on a malicious link.Show less
CVE-2017-2686 1Siemens 1Ruggedcom Rox I May 13, 2026 Mar 29, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information.
CVE-2017-6458 4Apple HpeNtp+1 more 4Hpux Ntp Mac Os XNtp+1 more May 13, 2026 Mar 27, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable.
CVE-2017-0148 2Microsoft Siemens 9Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+6 more Apr 22, 2026 Mar 17, 2017 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.Show less
CVE-2017-0147 2Microsoft Siemens 18Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+15 more Apr 22, 2026 Mar 17, 2017 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."Show less
CVE-2017-0146 2Microsoft Siemens 9Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+6 more Apr 22, 2026 Mar 17, 2017 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148.Show less
CVE-2017-0145 2Microsoft Siemens 9Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+6 more Aug 14, 2026 Mar 17, 2017 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148.Show less
CVE-2017-0144 2Microsoft Siemens 9Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+6 more Aug 14, 2026 Mar 17, 2017 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.Show less
CVE-2017-0143 3Microsoft PhilipsSiemens 10Acuson P300 Firmware Acuson P500 FirmwareAcuson Sc2000 Firmware+7 more Apr 22, 2026 Mar 17, 2017 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20...Show more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.Show less
CVE-2017-2685 1Siemens 3Sinumerik Integrate Access Mymachine/ethernet Sinumerik Integrate Operate ClientSinumerik Operate May 13, 2026 Mar 1, 2017 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read a...Show more Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00.032 (including) and 3.0.6 (excluding) contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle (MITM) attack.Show less
CVE-2017-2683 1Siemens 1Ruggedcom Network Management Software May 13, 2026 Feb 27, 2017 N/A· v4 8.2 HIGH· v3 4.3 MEDIUM· v2 A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative perm...Show more A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a persistent Cross-Site Scripting (XSS) attack, potentially resulting in obtaining administrative permissions.Show less
CVE-2017-2682 1Siemens 1Ruggedcom Network Management Software May 13, 2026 Feb 27, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrati...Show more The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform a Cross-Site Request Forgery (CSRF) attack, potentially allowing an attacker to execute administrative operations, provided the targeted user has an active session and is induced to trigger a malicious request.Show less
CVE-2017-2684 1Siemens 1Simatic Logon May 13, 2026 Feb 22, 2017 N/A· v4 9.0 CRITICAL· v3 6.8 MEDIUM· v2 Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level authentication.
CVE-2016-8567 1Siemens 1Sicam Pas/pqs May 13, 2026 Feb 13, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP.
CVE-2016-8566 1Siemens 1Sicam Pas/pqs May 13, 2026 Feb 13, 2017 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users fo...Show more An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possibly reconstruct the passwords of users for accessing the database.Show less
CVE-2016-7987 1Siemens 2Eta2 Firmware Eta4 Firmware May 13, 2026 Feb 13, 2017 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 240...Show more An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM 1703, SICAM BC 1703, and SICAM AK 3. Specially crafted packets sent to Port 2404/TCP could cause the affected device to go into defect mode. A cold start might be required to recover the system, a Denial-of-Service Vulnerability.Show less
CVE-2016-2518 7Debian FreebsdNetapp+4 more 17Clustered Data Ontap Communications User Data RepositoryData Ontap+14 more May 13, 2026 Jan 30, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large hmode value.

Previous 1...979899...109 Next