Browse all 1674 CVE security advisories affecting Siemens. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Siemens operates as a global industrial technology conglomerate, primarily manufacturing automation systems, power infrastructure, and medical imaging devices. Its extensive portfolio of programmable logic controllers and human-machine interfaces frequently exposes critical vulnerabilities, with recorded Common Vulnerabilities and Exposures numbering in the thousands. Historically, these systems have suffered from remote code execution flaws, buffer overflows, and insecure default configurations that allow unauthorized privilege escalation. Notable incidents include the Stuxnet worm, which exploited Siemens PLCs to disrupt Iranian nuclear centrifuges, highlighting the severe physical consequences of digital compromise in industrial control environments. The company has since strengthened its security posture through firmware updates and secure-by-design principles, yet legacy devices remain vulnerable due to long operational lifecycles and limited patching capabilities in isolated networks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2022-24039 | Siemens Desigo PXC4 安全漏洞 — Desigo PXC4 CWE-75 | 8.0 | - | 2022-05-10 |
| CVE-2021-41545 | 多款Siemens产品安全漏洞 — Desigo DXR2 CWE-248 | 7.5 | - | 2022-05-10 |
| CVE-2022-28663 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap CWE-787 | 8.8 | - | 2022-04-12 |
| CVE-2022-28662 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap CWE-787 | 6.5 | - | 2022-04-12 |
| CVE-2022-28661 | Siemens Simcenter Femap 缓冲区错误漏洞 — Simcenter Femap CWE-125 | 8.8 | - | 2022-04-12 |
| CVE-2022-28329 | Siemens SCALANCE输入验证错误漏洞 — SCALANCE W1788-1 M12 CWE-20 | 7.5 | - | 2022-04-12 |
| CVE-2022-28328 | Siemens SCALANCE 输入验证错误漏洞 — SCALANCE W1788-1 M12 CWE-20 | 7.5 | - | 2022-04-12 |
| CVE-2022-27481 | Siemens SCALANCE竞争条件问题漏洞 — SCALANCE W1788-1 M12 CWE-362 | 6.5 | - | 2022-04-12 |
| CVE-2022-27480 | Siemens SICAM 访问控制错误漏洞 — SICAM A8000 CP-8031 CWE-862 | 7.5 | - | 2022-04-12 |
| CVE-2022-27241 | Siemens Mendix 信息泄露漏洞 — Mendix Applications using Mendix 7 CWE-200 | 7.5 | - | 2022-04-12 |
| CVE-2022-27194 | 多款Siemens SIMATIC 产品 资源管理错误漏洞 — SIMATIC PCS neo (Administration Console) CWE-400 | 7.5 | - | 2022-04-12 |
| CVE-2022-26380 | 多款 Siemens 产品缓冲区错误漏洞 — SCALANCE X302-7 EEC (230V) CWE-125 | 7.5 | - | 2022-04-12 |
| CVE-2022-26335 | 多款 Siemens 产品安全漏洞 — SCALANCE X302-7 EEC (230V) CWE-120 | 7.5 | - | 2022-04-12 |
| CVE-2022-26334 | Siemens SCALANCE安全漏洞 — SCALANCE X302-7 EEC (230V) CWE-120 | 7.5 | - | 2022-04-12 |
| CVE-2022-25756 | 多款 Siemens 产品跨站脚本漏洞 — SCALANCE X302-7 EEC (230V) CWE-80 | 7.5 | - | 2022-04-12 |
| CVE-2022-25755 | Siemens SCALANCE 安全漏洞 — SCALANCE X302-7 EEC (230V) CWE-284 | 7.5 | - | 2022-04-12 |
| CVE-2022-25754 | 多款 Siemens 产品跨站请求伪造漏洞 — SCALANCE X302-7 EEC (230V) CWE-352 | 7.5 | - | 2022-04-12 |
| CVE-2022-25753 | 多款 Siemens 产品 缓冲区错误漏洞 — SCALANCE X302-7 EEC (230V) CWE-121 | 7.5 | - | 2022-04-12 |
| CVE-2022-25752 | 多款 Siemens 产品安全特征问题漏洞 — SCALANCE X302-7 EEC (230V) CWE-330 | 7.5 | - | 2022-04-12 |
| CVE-2022-25751 | 多款 Siemens 产品输入验证错误漏洞 — SCALANCE X302-7 EEC (230V) CWE-20 | 7.5 | - | 2022-04-12 |
| CVE-2022-25650 | Siemens Mendix 安全漏洞 — Mendix Applications using Mendix 7 CWE-284 | 6.5 | - | 2022-04-12 |
| CVE-2022-23450 | Siemens SIMATIC 代码问题漏洞 — SIMATIC Energy Manager Basic CWE-502 | 9.8 | - | 2022-04-12 |
| CVE-2022-23449 | Siemens SIMATIC 代码问题漏洞 — SIMATIC Energy Manager Basic CWE-427 | 7.3 | - | 2022-04-12 |
| CVE-2022-23448 | Siemens SIMATIC安全漏洞 — SIMATIC Energy Manager Basic CWE-732 | 7.8 | - | 2022-04-12 |
| CVE-2021-42029 | Siemens SIMATIC 安全漏洞 — SIMATIC STEP 7 (TIA Portal) V15 CWE-284 | 9.8 | - | 2022-04-12 |
| CVE-2021-40368 | Siemens SIMATIC S7-400 缓冲区错误漏洞 — SIMATIC S7-400 CPU 412-1 DP V7 CWE-119 | 7.5 | High | 2022-04-12 |
| CVE-2022-25622 | 多款Siemens SIMATIC产品资源管理错误漏洞 — SIMATIC CFU DIQ CWE-400 | 5.3 | Medium | 2022-04-12 |
| CVE-2022-26317 | Siemens Mendix 安全特征问题特征问题漏洞 — Mendix Applications using Mendix 7 CWE-284 | 7.5 | - | 2022-03-08 |
| CVE-2022-26314 | Siemens Mendix 安全漏洞 — Mendix Forgot Password Appstore module CWE-307 | 9.8 | - | 2022-03-08 |
| CVE-2022-26313 | Siemens Mendix 访问控制错误漏洞 — Mendix Forgot Password Appstore module CWE-284 | 9.8 | - | 2022-03-08 |
This page lists every published CVE security advisory associated with Siemens. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.