Industrial control and OT: vulnerabilities and fixes

Siemens, Schneider Electric, Rockwell, ABB, Mitsubishi, Honeywell, Moxa and other ICS and SCADA products. 158 CVEs tracked.

Industrial control and OT has 158 tracked vulnerabilities, 17 critical and 6 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 144. Most recent: 2026-10-22. Highest priority: CVE-2025-39682 (score 99/100).

• CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2025-25249 HIGH 8.1 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
• CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
• CVE-2026-109618 CRITICAL 9.8 UPGRADE MITIGATE PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the reques
• CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
• CVE-2026-109619 HIGH 8.1 UPGRADE MITIGATE PHP has various global state that temporarily points into request memory
• CVE-2025-61624 MEDIUM 6.0 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Path Traversal Vulnerability
• CVE-2026-58115 CRITICAL 10.0 A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1
• CVE-2023-24482 CRITICAL 10.0 UPGRADE A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.4
• CVE-2026-110936 MEDIUM 6.7 EXPLOITED UPGRADE Siemens Software Center Uncontrolled Search Path Element Vulnerability
• CVE-2025-40795 CRITICAL 9.8 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2023-27407 CRITICAL 9.9 UPGRADE A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1)
• CVE-2023-30898 CRITICAL 9.9 DOWNGRADE A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillan
• CVE-2023-30899 CRITICAL 9.9 DOWNGRADE A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillan
• CVE-2023-36750 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36751 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36752 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36753 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36754 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40765 CRITICAL 9.8 DOWNGRADE A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3)
• CVE-2025-40771 CRITICAL 9.8 A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versions < V2.4.24), SIMA
• CVE-2023-27404 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2022-43716 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2022-43768 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2023-36521 HIGH 8.6 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2023-36755 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2022-31810 HIGH 7.5 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8)
• CVE-2023-35920 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2023-35921 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2022-43767 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2023-27463 HIGH 8.8 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)
• CVE-2025-40949 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2026-46746 HIGH 8.8 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2026-69109 HIGH 7.5 A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3)
• CVE-2025-40796 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40797 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40798 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2024-56835 HIGH 8.8 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40937 HIGH 8.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2025-40938 HIGH 8.1 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2023-36386 HIGH 8.8 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2026-17612 MEDIUM 6.9 Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.2026020
• CVE-2026-33893 HIGH 7.5 UPGRADE A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All ver
• CVE-2023-28828 MEDIUM 5.9 UPGRADE A vulnerability has been identified in Polarion ALM (All versions < V22R2)
• CVE-2024-56839 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2024-56840 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-29105 MEDIUM 5.9 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2023-29106 MEDIUM 5.3 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2025-40947 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2026-22925 HIGH 7.5 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0)
• CVE-2026-46748 HIGH 8.8 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2023-27310 MEDIUM 6.6 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2)
• CVE-2023-29107 MEDIUM 5.3 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2023-36749 HIGH 7.4 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2024-56837 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-29131 HIGH 7.4 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5)
• CVE-2024-56836 HIGH 7.5 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-29104 MEDIUM 6.0 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2026-11917 HIGH 7.2 A path traversal security issue exists within Rockwell Automation ThinManager® software due to improper limita
• CVE-2026-31694 HIGH 7.8 UPGRADE MITIGATE In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page ca
• CVE-2024-56838 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40806 MEDIUM 5.3 UPGRADE A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)
• CVE-2022-29562 LOW 3.7 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-37246 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2025-40772 HIGH 7.4 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V3.0)
• CVE-2025-40948 MEDIUM 6.8 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2022-31808 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass int
• CVE-2023-24581 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v
• CVE-2023-37247 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2023-37374 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2023-37375 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2025-40831 MEDIUM 6.5 UPGRADE A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
• CVE-2022-47936 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.
• CVE-2022-47977 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.
• CVE-2023-24549 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24550 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24551 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24552 HIGH 7.8 DOWNGRADE UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24554 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24556 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24557 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24558 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24560 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24561 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24562 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24563 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24564 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v
• CVE-2023-24978 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24979 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24980 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24981 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24982 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24983 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24984 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24985 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24986 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24987 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24988 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24989 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24990 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24991 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24992 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24993 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24994 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24995 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24996 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-25140 HIGH 7.8 UPGRADE DOWNGRADE A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versio
• CVE-2023-27400 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27401 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27402 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27403 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27405 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27406 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-29053 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.
• CVE-2023-30986 HIGH 7.8 DOWNGRADE A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (
• CVE-2023-33124 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All v
• CVE-2023-37248 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2023-37376 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2025-40829 HIGH 7.8 UPGRADE A vulnerability has been identified in Simcenter Femap (All versions < V2512)
• CVE-2026-33862 HIGH 7.3 UPGRADE A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All ver
• CVE-2026-54429 HIGH 7.4 A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions)
• CVE-2023-26293 HIGH 7.3 DOWNGRADE A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), T
• CVE-2025-40827 HIGH 7.8 A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All v
• CVE-2026-46749 HIGH 7.5 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2023-27309 MEDIUM 5.0 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2)
• CVE-2023-29054 MEDIUM 6.7 UPGRADE UPGRADE A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All
• CVE-2023-31238 MEDIUM 5.5 UPGRADE A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG
• CVE-2025-40809 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40810 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40811 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40812 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2026-13599 HIGH 7.8 Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Abilit
• CVE-2026-44411 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5)
• CVE-2025-40807 MEDIUM 6.3 UPGRADE A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)
• CVE-2023-29128 LOW 3.8 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2025-40594 MEDIUM 6.3 MITIGATE MITIGATE A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All v
• CVE-2025-40830 MEDIUM 6.7 UPGRADE A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
• CVE-2026-24349 HIGH 7.1 UPGRADE A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unif
• CVE-2023-36748 MEDIUM 5.9 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40940 MEDIUM 4.9 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2026-69108 MEDIUM 6.0 A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1)
• CVE-2023-27462 LOW 3.1 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)
• CVE-2023-30901 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG
• CVE-2026-46747 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2023-27465 MEDIUM 4.6 UPGRADE UPGRADE A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All
• CVE-2025-40941 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2023-28829 LOW 3.9 DOWNGRADE DOWNGRADE A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15
• CVE-2025-40819 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
• CVE-2025-40939 MEDIUM 4.6 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2025-40774 MEDIUM 4.4 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V3.0)

FAQ

How do I fix Industrial control and OT vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Industrial control and OT being exploited right now?

Yes: 6 Industrial control and OT CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which Industrial control and OT CVE should I patch first?

CVE-2025-39682 currently ranks highest (99/100): Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability.

Software in this group

People search for: ics, scada, plc, siemens, schneider, rockwell, ot.

← Back to latest CVEs