siemens vulnerabilities

Recent CVEs affecting siemens products. 107 tracked.

siemens has 107 tracked vulnerabilities, 12 critical and 6 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 97. Most recent: 2026-10-21. Highest priority: CVE-2025-39682 (score 99/100).

• CVE-2023-24482 CRITICAL 10.0 UPGRADE A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.4
• CVE-2023-30899 CRITICAL 9.9 DOWNGRADE A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillan
• CVE-2023-36750 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36751 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36752 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36754 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-27404 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2022-43716 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2022-43768 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2023-36521 HIGH 8.6 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2023-36755 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2022-31810 HIGH 7.5 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8)
• CVE-2023-35920 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2023-35921 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions
• CVE-2023-27463 HIGH 8.8 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)
• CVE-2022-43767 HIGH 7.5 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIM
• CVE-2024-56835 HIGH 8.8 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-36386 HIGH 8.8 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-28828 MEDIUM 5.9 UPGRADE A vulnerability has been identified in Polarion ALM (All versions < V22R2)
• CVE-2023-29105 MEDIUM 5.9 UPGRADE UPGRADE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2023-29106 MEDIUM 5.3 MITIGATE MITIGATE A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cl
• CVE-2023-27310 MEDIUM 6.6 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2)
• CVE-2023-36749 HIGH 7.4 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2022-29562 LOW 3.7 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (
• CVE-2023-37246 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2023-24581 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v
• CVE-2023-37375 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2022-47936 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.
• CVE-2023-24549 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24550 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24552 HIGH 7.8 DOWNGRADE UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24556 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24562 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All v
• CVE-2023-24564 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All v
• CVE-2023-24979 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24980 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24981 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24982 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24984 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24987 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24989 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24993 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-24995 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-25140 HIGH 7.8 UPGRADE DOWNGRADE A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versio
• CVE-2023-27402 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27403 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-27405 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006)
• CVE-2023-29053 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.
• CVE-2023-30986 HIGH 7.8 DOWNGRADE A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (
• CVE-2023-33124 HIGH 7.8 UPGRADE UPGRADE A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All v
• CVE-2023-37248 HIGH 7.8 UPGRADE A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomat
• CVE-2026-33862 HIGH 7.3 UPGRADE A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All ver
• CVE-2023-26293 HIGH 7.3 DOWNGRADE A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), T
• CVE-2023-29054 MEDIUM 6.7 UPGRADE UPGRADE A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All
• CVE-2023-31238 MEDIUM 5.5 UPGRADE A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG
• CVE-2026-44411 HIGH 7.8 UPGRADE A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5)
• CVE-2025-40830 MEDIUM 6.7 UPGRADE A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
• CVE-2023-27462 LOW 3.1 UPGRADE A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3)
• CVE-2023-28829 LOW 3.9 DOWNGRADE DOWNGRADE A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15
• CVE-2023-30985 LOW 3.3 DOWNGRADE A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (
• CVE-2023-27408 LOW 3.3 UPGRADE A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1)
• CVE-2025-40795 CRITICAL 9.8 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40765 CRITICAL 9.8 DOWNGRADE A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1.2.2 < V3.1.2.3)
• CVE-2025-40949 CRITICAL 9.1 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2026-46746 HIGH 8.8 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2025-40796 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40797 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40798 HIGH 7.5 DOWNGRADE UPGRADE A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions
• CVE-2025-40937 HIGH 8.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2025-40938 HIGH 8.1 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2024-56839 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2024-56840 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40947 HIGH 7.5 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2026-46748 HIGH 8.8 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2024-56837 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2024-56836 HIGH 7.5 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2024-56838 HIGH 7.2 UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.0), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40806 MEDIUM 5.3 UPGRADE A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)
• CVE-2025-40772 HIGH 7.4 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V3.0)
• CVE-2025-40948 MEDIUM 6.8 UPGRADE UPGRADE A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (
• CVE-2025-40831 MEDIUM 6.5 UPGRADE A vulnerability has been identified in SINEC Security Monitor (All versions < V4.10.0)
• CVE-2025-40829 HIGH 7.8 UPGRADE A vulnerability has been identified in Simcenter Femap (All versions < V2512)
• CVE-2026-46749 HIGH 7.5 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2025-40809 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40810 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40811 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40812 HIGH 7.8 DOWNGRADE DOWNGRADE A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 14), Solid Edge SE2025
• CVE-2025-40807 MEDIUM 6.3 UPGRADE A vulnerability has been identified in Gridscale X Prepay (All versions < V4.2.1)
• CVE-2025-40594 MEDIUM 6.3 MITIGATE MITIGATE A vulnerability has been identified in SINAMICS G220 V6.4 (All versions < V6.4 HF2), SINAMICS S200 V6.4 (All v
• CVE-2025-40940 MEDIUM 4.9 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2026-46747 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6)
• CVE-2025-40941 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2025-40819 MEDIUM 4.3 UPGRADE A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
• CVE-2025-40939 MEDIUM 4.6 UPGRADE A vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1)
• CVE-2025-40774 MEDIUM 4.4 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V3.0)
• CVE-2025-40818 LOW 3.3 UPGRADE A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP4)
• CVE-2026-24349 HIGH 7.1 UPGRADE A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC WinCC Unif
• CVE-2025-40773 LOW 3.5 UPGRADE A vulnerability has been identified in SiPass integrated (All versions < V3.0)
• CVE-2026-109618 CRITICAL 9.8 UPGRADE MITIGATE PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the reques
• CVE-2026-109619 HIGH 8.1 UPGRADE MITIGATE PHP has various global state that temporarily points into request memory
• CVE-2026-31694 HIGH 7.8 UPGRADE MITIGATE In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page ca
• CVE-2026-110936 MEDIUM 6.7 EXPLOITED UPGRADE Siemens Software Center Uncontrolled Search Path Element Vulnerability
• CVE-2025-39682 CRITICAL 9.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
• CVE-2025-39964 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Race Condition Vulnerability
• CVE-2025-61624 MEDIUM 6.0 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Path Traversal Vulnerability
• CVE-2026-53362 HIGH 7.8 EXPLOITED UPGRADE MITIGATE Linux Kernel Unspecified Vulnerability
• CVE-2025-25249 HIGH 8.1 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

FAQ

How do I fix siemens vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is siemens being exploited right now?

Yes: 6 siemens CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which siemens CVE should I patch first?

CVE-2025-39682 currently ranks highest (99/100): Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability.

Products

• 6gk1411-1ac00 firmware
• 6gk1411-5ac00 firmware
• comos
• gridscale x prepay
• jt open toolkit
• jt utilities
• jt2go
• parasolid
• polarion alm
• q200 firmware
• ruggedcom ape1808 firmware
• ruggedcom crossbow
• ruggedcom rox ii firmware
• ruggedcom rox mx5000 firmware
• ruggedcom rox mx5000re firmware
• ruggedcom rox rx1400 firmware
• ruggedcom rox rx1500 firmware
• ruggedcom rox rx1501 firmware
• ruggedcom rox rx1510 firmware
• scalance lpe9403 firmware
• scalance x200-4p irt firmware
• scalance x201-3p irt firmware
• scalance x201-3p irt pro firmware
• scalance x202-2irt firmware
• scalance x202-2p irt firmware
• scalance x202-2p irt pro firmware
• simatic cn 4100 firmware
• simatic cp 1242-7 v2 firmware
• simatic cp 1243-1 dnp3 firmware
• simatic cp 1243-1 firmware
• simatic cp 1243-1 iec firmware
• simatic cp 1243-7 lte eu firmware
• simatic cp 1243-7 lte us firmware
• simatic mv540 h firmware
• simatic mv540 s firmware
• simatic mv550 h firmware
• simatic mv550 s firmware
• simatic mv560 u firmware
• simatic mv560 x firmware
• simatic net pc software
• simatic pcs 7
• simatic pcs neo
• simatic s7-1500 cpu 1518-4 pn\/dp mfp firmware
• simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware
• simatic s7-1500 tm mfp firmware
• simatic wincc
• simatic wincc unified pc runtime
• simcenter femap
• sinamics g220 firmware
• sinamics s200 firmware
• sinamics s210 firmware
• sinaut st7sc
• sinec ins
• sinec security monitor
• sinema remote connect server
• sipass integrated
• siveillance video
• software center
• solid edge
• solid edge se2022

← Back to latest CVEs