目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Siemens AG 厂商漏洞列表 / CVE 中文分析 135

Siemens AG 厂商相关 135 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

西门子是一家全球领先的工业自动化与数字化企业，核心业务涵盖工业软件、智能基础设施及医疗诊断设备。其产品线因广泛部署于关键基础设施，常成为高级持续性威胁（APT）的目标。历史漏洞多涉及远程代码执行、身份验证绕过及缓冲区溢出，部分源于老旧工业协议的安全缺陷。近期关注点在于其工业控制系统中未修补的零日漏洞，以及针对能源和制造行业的供应链攻击事件，凸显了OT环境安全加固的紧迫性。

Top products by Siemens AG: SICAM MMU SINUMERIK 808D V4.7, SINUMERIK 808D V4.8, SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 SICLOCK TC100, SICLOCK TC400 SCALANCE M875 SIMATIC PCS 7 V8.0 and earlier SINEMA Remote Connect Server EN100 Ethernet module DNP3 variant SIMATIC HMI Comfort Panels 4" - 22" TeleControl Server Basic Siveillance VMS 2017 R2 SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) SIMATIC RTLS Locating Manager XHQ Polarion SINUMERIK 828D V4.7, SINUMERIK 840D sl V4.7, SINUMERIK 840D sl V4.8 ROX II SCALANCE SC-600 SIEMENS LOGO!8 SINAMICS PERFECT HARMONY GH180 with NXG I control, MLFBs: 6SR2...-, 6SR3...-, 6SR4...- All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules Firmware variant IEC 61850 for EN100 Ethernet module SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V13, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V14, SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V15 TIM 1531 IRC Automation License Manager 5 SIMATIC S7-300 CPU family Polarion Subversion Webclient Spectrum Power 4 SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) SIMATIC IT UADM
CVE ID 标题 CVSS 风险等级 Published
CVE-2018-4859 Siemens SCALANCE M875 操作系统命令注入漏洞 — SCALANCE M875 CWE-78 7.2 - 2018-06-26
CVE-2018-4860 Siemens SCALANCE M875 操作系统命令注入漏洞 — SCALANCE M875 CWE-78 7.2 - 2018-06-26
CVE-2018-4861 Siemens SCALANCE M875 信息泄露漏洞 — SCALANCE M875 CWE-22 4.9 - 2018-06-26
CVE-2018-4850 Siemens SIMATIC S7-400和SIMATIC S7-400H 安全漏洞 — SIMATIC S7-400 (incl. F) CPU hardware version 4.0 and below, SIMATIC S7-400 (incl. F) CPU hardware version 5.0, SIMATIC S7-400H CPU hardware version 4.5 and below CWE-20 7.5 - 2018-05-16
CVE-2018-4849 Siemens Siveillance VMS Video for Android和iOS 安全漏洞 — Siveillance VMS Video for Android, Siveillance VMS Video for iOS CWE-295 7.4 - 2018-05-03
CVE-2018-4847 Siemens SIMATIC WinCC OA Operator iOS App 安全漏洞 — SIMATIC WinCC OA Operator iOS App CWE-538 4.6 - 2018-04-23
CVE-2018-4841 Siemens TIM 1531 IRC 安全漏洞 — TIM 1531 IRC CWE-303 9.8 - 2018-03-29
CVE-2018-4844 Siemens SIMATIC WinCC OA UI for Android和iOS 安全漏洞 — SIMATIC WinCC OA UI for Android, SIMATIC WinCC OA UI for iOS CWE-284 7.3 - 2018-03-20
CVE-2018-4838 多款Siemens产品访问控制错误漏洞 — EN100 Ethernet module IEC 61850 variant - - 2018-03-08
CVE-2018-4835 Siemens TeleControl Server Basic 安全漏洞 — TeleControl Server Basic CWE-287 5.3 - 2018-01-25
CVE-2018-4836 Siemens TeleControl Server Basic 安全漏洞 — TeleControl Server Basic CWE-287 8.8 - 2018-01-25
CVE-2018-4837 Siemens TeleControl Server Basic 安全漏洞 — TeleControl Server Basic CWE-400 7.5 - 2018-01-25
CVE-2017-6865 多款Siemens产品输入验证漏洞 — Primary Setup Tool (PST) 6.2 - 2017-05-11
CVE-2016-9158 Siemens SIMATIC S7-300和S7-400 CPUs 输入验证错误漏洞 — SIMATIC S7-300 CPU family CWE-20 7.5 - 2016-12-17
CVE-2016-9159 Siemens SIMATIC S7-300和S7-400 CPUs 信息泄露漏洞 — SIMATIC S7-300 CPU family CWE-200 7.5 - 2016-12-17

本页汇总了 Siemens AG 厂商截至目前公开的全部 135 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。