Siemens

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-5232 1Siemens 1Simatic Wincc Sm@rtclient May 6, 2026 Jan 14, 2015 N/A· v4 N/A· v3 1.9 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the app in the background state.
CVE-2014-5231 1Siemens 1Simatic Wincc Sm@rtclient May 6, 2026 Jan 14, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors.
CVE-2014-8552 1Siemens 4Simatic Pcs7 Simatic Pcs 7Simatic Tiaportal+1 more May 6, 2026 Nov 26, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers...Show more The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to read arbitrary files via crafted packets.Show less
CVE-2014-8551 1Siemens 4Simatic Pcs7 Simatic Pcs 7Simatic Tiaportal+1 more May 6, 2026 Nov 26, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers...Show more The WinCC server in Siemens SIMATIC WinCC 7.0 through SP3, 7.2 before Update 9, and 7.3 before Update 2; SIMATIC PCS 7 7.1 through SP4, 8.0 through SP2, and 8.1; and TIA Portal 13 before Update 6 allows remote attackers to execute arbitrary code via crafted packets.Show less
CVE-2014-5074 1Siemens 8Simatic S7 1500 Cpu Firmware Simatic S7 1511 1 Pn CpuSimatic S7 1513 1 Pn Cpu+5 more May 6, 2026 Aug 17, 2014 N/A· v4 N/A· v3 7.1 HIGH· v2 Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.
CVE-2014-4686 1Siemens 2Simatic Pcs7 Wincc May 6, 2026 Jul 24, 2014 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting...Show more The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during the sniffing of network traffic on TCP port 1030.Show less
CVE-2014-4685 1Siemens 2Simatic Pcs7 Wincc May 6, 2026 Jul 24, 2014 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control.
CVE-2014-4684 1Siemens 2Simatic Pcs7 Wincc May 6, 2026 Jul 24, 2014 N/A· v4 N/A· v3 6.0 MEDIUM· v2 The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433.
CVE-2014-4683 1Siemens 2Simatic Pcs7 Wincc May 6, 2026 Jul 24, 2014 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request.
CVE-2014-4682 1Siemens 2Simatic Pcs7 Wincc May 6, 2026 Jul 24, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request.
CVE-2014-0224 9Fedoraproject Filezilla ProjectMariadb+6 more 16Application Processing Engine Firmware Cp1543 1 FirmwareEnterprise Linux+13 more May 6, 2026 Jun 5, 2014 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key...Show more OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.Show less
CVE-2014-2909 1Siemens 6Simatic S7 Cpu 1211c Simatic S7 Cpu 1200 FirmwareSimatic S7 Cpu 1212c+3 more May 6, 2026 Apr 25, 2014 N/A· v4 N/A· v3 5.8 MEDIUM· v2 CRLF injection vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary HTTP headers via unspecified vectors.
CVE-2014-2908 1Siemens 6Simatic S7 Cpu 1211c Simatic S7 Cpu 1200 FirmwareSimatic S7 Cpu 1212c+3 more May 6, 2026 Apr 25, 2014 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2014-2733 1Siemens 1Sinema Server May 6, 2026 Apr 19, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80.
CVE-2014-2732 1Siemens 1Sinema Server May 6, 2026 Apr 19, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple directory traversal vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to access arbitrary files via HTTP traffic to port (1) 4999 or (2) 80.
CVE-2014-2731 1Siemens 1Sinema Server May 6, 2026 Apr 19, 2014 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple unspecified vulnerabilities in the integrated web server in Siemens SINEMA Server before 12 SP1 allow remote attackers to execute arbitrary code via HTTP traffic to port (1) 4999 or (2) 80.
CVE-2014-0160 13Broadcom CanonicalDebian+10 more 28Application Processing Engine Firmware Cp 1543 1 FirmwareDebian Linux+25 more Apr 21, 2026 Apr 7, 2014 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa...Show more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.Show less
CVE-2014-2590 1Siemens 1Ruggedcom Rugged Operating System May 6, 2026 Apr 1, 2014 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted...Show more The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial of service (interface outage) via crafted HTTP packets.Show less
CVE-2014-2258 1Siemens 6Simatic S7 Cpu 1211c Simatic S7 Cpu 1200 FirmwareSimatic S7 Cpu 1212c+3 more May 6, 2026 Mar 24, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets, a different vulnerability than CVE-2014-2259.
CVE-2014-2256 1Siemens 6Simatic S7 Cpu 1211c Simatic S7 Cpu 1200 FirmwareSimatic S7 Cpu 1212c+3 more May 6, 2026 Mar 24, 2014 N/A· v4 N/A· v3 7.8 HIGH· v2 Siemens SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets, a different vulnerability than CVE-2014-2257.

Previous 1...101102103...109 Next