Siemens
Number 13 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: Siemens, siemens
Total vulnerabilities
2,209
Critical
136
High
764
Known Exploited
2
Exploit available
2
Network, no login needed
32.2%
Of 1,342 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 146 | 16 | 80 | 45 | 5 | 0 |
| 2025 | 280 | 22 | 166 | 78 | 14 | 0 |
| 2024 | 307 | 27 | 175 | 91 | 14 | 0 |
| 2023 | 307 | 27 | 178 | 55 | 20 | 27 |
| 2022 | 392 | 29 | 101 | 54 | 7 | 201 |
| 2021 | 344 | 7 | 26 | 21 | 1 | 289 |
| 2020 | 139 | 1 | 15 | 13 | 0 | 110 |
| 2019 | 191 | 5 | 10 | 14 | 3 | 159 |
| 2018 | 74 | 2 | 3 | 2 | 0 | 67 |
| 2017 | 19 | 0 | 7 | 2 | 0 | 10 |
| 2016 | 7 | 0 | 3 | 3 | 0 | 1 |
| 2015 | 1 | 0 | 0 | 0 | 0 | 1 |
| 2014 | 1 | 0 | 0 | 0 | 0 | 1 |
| 2013 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2012 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2011 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2010 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2009 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2008 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2007 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2006 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2005 | 1 | 0 | 0 | 0 | 0 | 1 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | 230 | 63 |
| JT2Go | 151 | 40 |
| TeleControl Server Basic | 72 | 68 |
| RUGGEDCOM ROX MX5000 | 56 | 25 |
| SINEMA Remote Connect Server | 47 | 12 |
| SINEC NMS | 43 | 21 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | 41 | 13 |
| Simcenter Femap | 40 | 33 |
| SPPA-T3000 MS3000 Migration Server | 35 | 0 |
| Tecnomatix Plant Simulation | 31 | 28 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 595 | 316 |
| SQL Injection | 100 | 83 |
| Authentication Issues | 82 | 31 |
| Cross-Site Scripting | 59 | 19 |
| Improper Input Validation | 59 | 31 |
| Stack-based Buffer Overflow | 59 | 34 |
| Command Injection | 52 | 41 |
| Improper Access Control | 50 | 9 |
| Denial of Service | 45 | 15 |
| Path Traversal | 42 | 16 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-110936 | Siemens Software Center vulnerability | Medium | 1.0% | |
| CVE-2016-8562 | Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability | High | 3.6% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-59082 | Siemens SIMATIC WinCC V7.5 vulnerability | High | n/a | |
| CVE-2026-58114 | Siemens SIMATIC BATCH V9.1 vulnerability | High | n/a | |
| CVE-2026-112137 | Siemens Mendix Studio Pro 11: Cross-Site Request Forgery | Medium | n/a | |
| CVE-2026-112136 | Siemens Mendix Studio Pro 11 vulnerability | High | n/a | |
| CVE-2026-109830 | Siemens meta-iot2050: Command Injection | High | n/a | |
| CVE-2026-109097 | Siemens ROS#: Code Injection | High | n/a | |
| CVE-2026-89209 | Siemens Mendix SAML (Mendix 10 compatible): Authentication Issues | Medium | 0.3% | |
| CVE-2026-110936 | Siemens Software Center vulnerability | Medium | 1.0% | |
| CVE-2026-89208 | Siemens Capital Embedded AR Classic 431-422: Memory Corruption | Medium | 0.3% | |
| CVE-2026-89206 | Siemens RUGGEDCOM CROSSBOW vulnerability | Medium | 0.2% |