Skip to content
Noroxi

Siemens records

2,260 published records for vendor Siemens. 38 of them have been exploited in the wild (listed in CISA KEV) and 47 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
38 · 1.7%
Weaponized
47 · 2.1%
Pre-auth RCE
111
With a fix record
10.7%
Median publish → KEV
91 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

2,260 records
  • CVE-2021-44228
    100Now

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    apache · log4jDec 10, 2021

  • CVE-2019-0708
    99Now

    A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    microsoft · windows 7May 16, 2019

  • CVE-2022-22965
    99Now

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    vmware · spring frameworkApr 1, 2022

  • CVE-2017-5689
    97Now

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (A

    CriticalCVSS 9.8KEVWeaponizedEPSS 92%

    intel · active management technology firmwareMay 2, 2017

  • CVE-2021-40438
    96Now

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    CriticalCVSS 9.0KEVWeaponizedEPSS 99%

    resf · rocky linuxSep 16, 2021

  • CVE-2026-109618
    96Now

    RCE via OOM corruption

    CriticalCVSS 9.2KEVWeaponizedEPSS 99%

    php · phpOct 21, 2026

  • CVE-2026-109619
    96Now

    RCE via stale global state

    CriticalCVSS 9.2KEVWeaponizedEPSS 99%

    php · phpOct 21, 2026

  • CVE-2021-45046
    96Now

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    CriticalCVSS 9.0KEVWeaponizedEPSS 99%

    apache · log4jDec 14, 2021

  • CVE-2017-0144
    95Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.8KEVWeaponizedEPSS 99%

    microsoft · server message blockMar 16, 2017

  • CVE-2026-24858
    95Now

    An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.

    CriticalCVSS 9.8KEVWeaponizedEPSS 86%

    fortinet · fortianalyzerJan 27, 2026

  • CVE-2017-0143
    93Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.8KEVWeaponizedEPSS 93%

    microsoft · server message blockMar 16, 2017

  • CVE-2017-0148
    92Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.1KEVWeaponizedEPSS 99%

    microsoft · server message blockMar 16, 2017

  • CVE-2017-0146
    92Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.8KEVWeaponizedEPSS 89%

    microsoft · server message blockMar 16, 2017

  • CVE-2017-0145
    92Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 8.8KEVWeaponizedEPSS 89%

    microsoft · server message blockMar 16, 2017

  • CVE-2026-111497
    91Now

    Out-of-Bounds Write in Google Brotli Decoder

    CriticalCVSS 9.2KEVWeaponizedEPSS 82%

    google · brotliOct 22, 2026

  • CVE-2014-0160
    90Now

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    openssl · opensslApr 7, 2014

  • CVE-2023-44487
    90Now

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmwareOct 10, 2023

  • CVE-2017-0147
    90Now

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    microsoft · windows 10 1507Mar 16, 2017

  • CVE-2026-31431
    90Now

    crypto: algif_aead - Revert to operating out-of-place

    HighCVSS 7.8KEVWeaponizedEPSS 98%

    linux · linux kernelApr 22, 2026

  • CVE-2026-0257
    90Now

    PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

    HighCVSS 7.8KEVWeaponizedEPSS 95%

    paloaltonetworks · pan-osMay 13, 2026

  • CVE-2021-4034
    89Now

    A local privilege escalation vulnerability was found on polkit's pkexec utility.

    HighCVSS 7.8KEVWeaponizedEPSS 94%

    polkit project · polkitJan 28, 2022

  • CVE-2022-0847
    89Now

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe

    HighCVSS 7.8KEVWeaponizedEPSS 92%

    linux · linux kernelMar 10, 2022

  • CVE-2025-59718
    89Now

    A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti

    CriticalCVSS 9.8KEVWeaponizedEPSS 68%

    fortinet · fortiproxyDec 9, 2025

  • CVE-2023-4911
    80Now

    Glibc: buffer overflow in ld.so leading to privilege escalation

    HighCVSS 7.8KEVWeaponizedEPSS 63%

    gnu · glibcOct 3, 2023

  • CVE-2026-0300
    80Now

    PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal

    CriticalCVSS 9.3KEVWeaponizedEPSS 41%

    paloaltonetworks · pan-osMay 6, 2026