Skip to content
Threat Feed

Vendor

Siemens

7 briefs RSS
medium advisory

Siemens SIPROTEC 5 Information Disclosure Vulnerability

A remote, anonymous attacker can exploit a vulnerability in Siemens SIPROTEC 5 devices to disclose sensitive information.

SIPROTEC 5 information-disclosure ics siemens
2r 1t
high advisory

Solid Edge SE2026 Stack-Based Overflow Vulnerability (CVE-2026-44412)

A stack-based overflow vulnerability in Solid Edge SE2026 (versions prior to V226.0 Update 5) allows for arbitrary code execution via specially crafted PAR files.

Solid Edge SE2026 cve stack overflow code execution siemens
2r 1t 1c
high advisory

Solid Edge SE2026 Uninitialized Pointer Access Vulnerability (CVE-2026-44411)

Solid Edge SE2026 is vulnerable to uninitialized pointer access while parsing specially crafted PAR files, potentially leading to arbitrary code execution in the context of the current process (CVE-2026-44411).

Solid Edge SE2026 cve rce solid edge uninitialized pointer
2r 2t 1c
medium advisory

Siemens Teamcenter Vulnerability CVE-2026-33862 - Cross-Site Scripting

Siemens Teamcenter versions V2312 (before V2312.0014), V2406 (before V2406.0012), V2412 (before V2412.0009), V2506 (before V2506.0005), and V2512 are vulnerable to cross-site scripting (XSS) due to improper encoding or filtering of user-supplied data, potentially leading to arbitrary code execution by other users.

Teamcenter V2312 +4 cve xss siemens teamcenter
2r 1t 1c
high threat

Siemens RUGGEDCOM ROX Devices Vulnerable to Remote Code Execution via Feature Key Injection (CVE-2025-40947)

CVE-2025-40947 describes a vulnerability in Siemens RUGGEDCOM ROX devices that allows authenticated remote attackers to inject arbitrary commands via a maliciously crafted feature key, resulting in remote code execution with root privileges.

RUGGEDCOM ROX MX5000 +10 cve rce siemens ruggedcom ics
2r 1t 1c
medium advisory

Siemens SIMATIC CN 4100 Unauthenticated Resource Exhaustion (CVE-2026-22924)

Siemens SIMATIC CN 4100 versions before V5.0 are vulnerable to resource exhaustion due to improper restriction of unauthenticated connections, potentially leading to disruption of operations and unauthorized actions.

SIMATIC CN 4100 resource-exhaustion dos ics cve-2026-22924
2r 1t 1c
critical advisory

CVE-2025-40949 - Siemens RUGGEDCOM ROX Web UI Command Injection

An authenticated remote command injection vulnerability exists in the web UI scheduler functionality of multiple RUGGEDCOM ROX devices before V2.17.1, allowing arbitrary command execution with root privileges.

RUGGEDCOM ROX MX5000 +10 command-injection rce ruggedcom
2r 1t 1c