https://vulnogram.org/ Most recent CVEs assigned by Siemens (siemens). https://vulnogram.org/seaview/icons/siemens.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-110936 https://vulnogram.org/CVE-2026-110936 A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search path. This could allow an authenticated local attacker to place a speci… High Known Exploited Thu, 15 Oct 2026 14:01:17 GMT https://vulnogram.org/CVE-2026-102076 https://vulnogram.org/CVE-2026-102076 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All… High Tue, 13 Oct 2026 09:19:16 GMT https://vulnogram.org/CVE-2026-102075 https://vulnogram.org/CVE-2026-102075 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All… High Tue, 13 Oct 2026 09:19:15 GMT https://vulnogram.org/CVE-2026-102074 https://vulnogram.org/CVE-2026-102074 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All… High Tue, 13 Oct 2026 09:19:14 GMT https://vulnogram.org/CVE-2026-102073 https://vulnogram.org/CVE-2026-102073 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All… High Tue, 13 Oct 2026 09:19:13 GMT https://vulnogram.org/CVE-2026-89208 https://vulnogram.org/CVE-2026-89208 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (A… Medium Tue, 13 Oct 2026 09:19:12 GMT https://vulnogram.org/CVE-2026-89206 https://vulnogram.org/CVE-2026-89206 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify the state of scheduled actions. This could allow an authenticated attack… Medium Tue, 13 Oct 2026 09:19:10 GMT https://vulnogram.org/CVE-2026-89205 https://vulnogram.org/CVE-2026-89205 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attacker with mi… Medium Tue, 13 Oct 2026 09:19:09 GMT https://vulnogram.org/CVE-2026-89204 https://vulnogram.org/CVE-2026-89204 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete su… Medium Tue, 13 Oct 2026 09:19:08 GMT https://vulnogram.org/CVE-2026-89203 https://vulnogram.org/CVE-2026-89203 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to retrieve system-wide information that is not intended for their privilege… Medium Tue, 13 Oct 2026 09:19:07 GMT https://vulnogram.org/CVE-2026-89202 https://vulnogram.org/CVE-2026-89202 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to di… High Tue, 13 Oct 2026 09:19:06 GMT https://vulnogram.org/CVE-2026-89201 https://vulnogram.org/CVE-2026-89201 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticate… High Tue, 13 Oct 2026 09:19:05 GMT https://vulnogram.org/CVE-2026-89200 https://vulnogram.org/CVE-2026-89200 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker with administ… High Tue, 13 Oct 2026 09:19:04 GMT https://vulnogram.org/CVE-2026-89199 https://vulnogram.org/CVE-2026-89199 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve a… High Tue, 13 Oct 2026 09:19:03 GMT https://vulnogram.org/CVE-2026-89198 https://vulnogram.org/CVE-2026-89198 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific pri… High Tue, 13 Oct 2026 09:19:01 GMT https://vulnogram.org/CVE-2026-89197 https://vulnogram.org/CVE-2026-89197 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification conditions processed during the Notification Profile configuration. This c… High Tue, 13 Oct 2026 09:19:00 GMT https://vulnogram.org/CVE-2026-89196 https://vulnogram.org/CVE-2026-89196 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the Bulk Import/Export workflow. This could allow an authenticated attacke… High Tue, 13 Oct 2026 09:18:59 GMT https://vulnogram.org/CVE-2026-85115 https://vulnogram.org/CVE-2026-85115 A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with… Medium Tue, 13 Oct 2026 09:18:58 GMT https://vulnogram.org/CVE-2026-85114 https://vulnogram.org/CVE-2026-85114 A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attac… High Tue, 13 Oct 2026 09:18:57 GMT https://vulnogram.org/CVE-2026-78557 https://vulnogram.org/CVE-2026-78557 A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend before rendering it in the user interface. Because the front end is int… High Tue, 13 Oct 2026 09:18:56 GMT https://vulnogram.org/CVE-2026-78556 https://vulnogram.org/CVE-2026-78556 A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay co… High Tue, 13 Oct 2026 09:18:55 GMT https://vulnogram.org/CVE-2026-72895 https://vulnogram.org/CVE-2026-72895 A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (All versions < V28.01.15). A BIOS vendor test key is prese… High Tue, 13 Oct 2026 09:18:54 GMT https://vulnogram.org/CVE-2026-63357 https://vulnogram.org/CVE-2026-63357 Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Rea… Medium Tue, 13 Oct 2026 09:18:51 GMT https://vulnogram.org/CVE-2026-63356 https://vulnogram.org/CVE-2026-63356 Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could allow an attacker to social engineer an authorized user who holds the functi… Medium Tue, 13 Oct 2026 09:18:48 GMT https://vulnogram.org/CVE-2026-63355 https://vulnogram.org/CVE-2026-63355 Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “… Medium Tue, 13 Oct 2026 09:18:45 GMT https://vulnogram.org/CVE-2026-63354 https://vulnogram.org/CVE-2026-63354 Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Re… Critical Tue, 13 Oct 2026 09:18:42 GMT https://vulnogram.org/CVE-2026-63353 https://vulnogram.org/CVE-2026-63353 Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” int… Critical Tue, 13 Oct 2026 09:18:39 GMT https://vulnogram.org/CVE-2026-63352 https://vulnogram.org/CVE-2026-63352 Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagno… Medium Tue, 13 Oct 2026 09:18:36 GMT https://vulnogram.org/CVE-2026-63351 https://vulnogram.org/CVE-2026-63351 Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. This could allow an attacker to social engineer an authorized user who holds… Medium Tue, 13 Oct 2026 09:18:34 GMT https://vulnogram.org/CVE-2026-63350 https://vulnogram.org/CVE-2026-63350 Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the function right “Read diagnostics” into importing a specially crafted trac… Critical Tue, 13 Oct 2026 09:18:31 GMT https://vulnogram.org/CVE-2026-59241 https://vulnogram.org/CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The affected application does not sufficiently restrict the permissions a… High Tue, 13 Oct 2026 09:18:29 GMT https://vulnogram.org/CVE-2026-44415 https://vulnogram.org/CVE-2026-44415 Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate… Critical Tue, 13 Oct 2026 09:18:28 GMT https://vulnogram.org/CVE-2026-44414 https://vulnogram.org/CVE-2026-44414 A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1.13, Indust… Medium Tue, 13 Oct 2026 09:18:26 GMT https://vulnogram.org/CVE-2026-89207 https://vulnogram.org/CVE-2026-89207 A vulnerability has been identified in WTV676-HB6035 Web Interface (All versions < V3.94), WTV776-HB6035 Web Interface (All versions < V4.17). Affected devices do not properly validate input received from backend services. This could allow an unauthe… Medium Wed, 16 Sep 2026 07:59:08 GMT https://vulnogram.org/CVE-2026-67367 https://vulnogram.org/CVE-2026-67367 A vulnerability has been identified in SIMOVE Fleetmanager V3.1 (All versions < V3.1.13), SIMOVE Fleetmanager V3.2 (All versions < V3.2.4), SIMOVE Fleetmanager V3.3 (All versions < V3.3.2), SIMOVE Fleetmanager V4.0 (All versions < V4.0.1), SIPLANT V1… Critical Tue, 08 Sep 2026 08:11:36 GMT https://vulnogram.org/CVE-2026-62654 https://vulnogram.org/CVE-2026-62654 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key sequence during device boot, in which the device downloads and executes program code from a network server wit… High Tue, 08 Sep 2026 08:11:35 GMT https://vulnogram.org/CVE-2026-62653 https://vulnogram.org/CVE-2026-62653 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulti… High Tue, 08 Sep 2026 08:11:34 GMT https://vulnogram.org/CVE-2026-62652 https://vulnogram.org/CVE-2026-62652 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available… Medium Tue, 08 Sep 2026 08:11:33 GMT https://vulnogram.org/CVE-2026-62650 https://vulnogram.org/CVE-2026-62650 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management interface are not properly enforced, allowing role-based access control (RBAC) restrictions to be bypassed throu… High Tue, 08 Sep 2026 08:11:32 GMT https://vulnogram.org/CVE-2026-62649 https://vulnogram.org/CVE-2026-62649 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attac… High Tue, 08 Sep 2026 08:11:30 GMT https://vulnogram.org/CVE-2026-62648 https://vulnogram.org/CVE-2026-62648 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The length of the URL component contained in pre-authenticated HTTP messages is not properly validated before appending additional data to it, resulting in an out-of-bounds… High Tue, 08 Sep 2026 08:11:29 GMT https://vulnogram.org/CVE-2026-62647 https://vulnogram.org/CVE-2026-62647 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is not initialized with a True Ran… Critical Tue, 08 Sep 2026 08:11:24 GMT https://vulnogram.org/CVE-2026-62646 https://vulnogram.org/CVE-2026-62646 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasi… Critical Tue, 08 Sep 2026 08:11:23 GMT https://vulnogram.org/CVE-2026-62645 https://vulnogram.org/CVE-2026-62645 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through the web interface that can be used to calculate the current and past session ID numbers. This could allow an attacker to bypass the authentica… Critical Tue, 08 Sep 2026 08:11:22 GMT https://vulnogram.org/CVE-2026-58113 https://vulnogram.org/CVE-2026-58113 A vulnerability has been identified in Teamcenter V2412 (All versions < V2412.0013), Teamcenter V2506 (All versions < V2506.0010), Teamcenter V2512 (All versions < V2512.2607), Teamcenter V2606 (All versions < V2606.2607). Affected applications do no… High Tue, 08 Sep 2026 08:11:21 GMT https://vulnogram.org/CVE-2026-50093 https://vulnogram.org/CVE-2026-50093 A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All versions < V4.0.9.2178), Siveillance Control V3.0 (All versions < V3.0.22.2177), Siveillance Control V4.0 (All versio… Critical Tue, 08 Sep 2026 08:11:18 GMT https://vulnogram.org/CVE-2026-34223 https://vulnogram.org/CVE-2026-34223 A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All versions), Desigo… High Tue, 08 Sep 2026 08:11:17 GMT https://vulnogram.org/CVE-2026-80465 https://vulnogram.org/CVE-2026-80465 A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.3), Mendix SAML (Mendix 9.24 compatible) (All versions < V3.6.27). Affected versions of the mod… High Thu, 03 Sep 2026 11:25:10 GMT https://vulnogram.org/CVE-2026-66155 https://vulnogram.org/CVE-2026-66155 A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-controllable in… High Thu, 27 Aug 2026 11:56:48 GMT https://vulnogram.org/CVE-2026-69109 https://vulnogram.org/CVE-2026-69109 A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to acces… High Tue, 11 Aug 2026 12:20:31 GMT