Browse all 1674 CVE security advisories affecting Siemens. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Siemens operates as a global industrial technology conglomerate, primarily manufacturing automation systems, power infrastructure, and medical imaging devices. Its extensive portfolio of programmable logic controllers and human-machine interfaces frequently exposes critical vulnerabilities, with recorded Common Vulnerabilities and Exposures numbering in the thousands. Historically, these systems have suffered from remote code execution flaws, buffer overflows, and insecure default configurations that allow unauthorized privilege escalation. Notable incidents include the Stuxnet worm, which exploited Siemens PLCs to disrupt Iranian nuclear centrifuges, highlighting the severe physical consequences of digital compromise in industrial control environments. The company has since strengthened its security posture through firmware updates and secure-by-design principles, yet legacy devices remain vulnerable due to long operational lifecycles and limited patching capabilities in isolated networks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-13808 | Siemens CP1604和CP1616 信息泄露漏洞 — CP 1604 | 9.1 | - | 2019-04-17 |
| CVE-2018-13809 | Siemens CP1604和CP1616 跨站脚本漏洞 — CP 1604 | 6.1 | - | 2019-04-17 |
| CVE-2018-13810 | Siemens CP1604和CP1616 跨站请求伪造漏洞 — CP 1604 | 6.5 | - | 2019-04-17 |
| CVE-2018-16558 | Siemens SIMATIC S7-1500 CPU 输入验证错误漏洞 — SIMATIC S7-1500 CPU | 7.5 | - | 2019-04-17 |
| CVE-2018-16559 | Siemens SIMATIC S7-1500 CPU 输入验证错误漏洞 — SIMATIC S7-1500 CPU | 7.5 | - | 2019-04-17 |
| CVE-2018-16561 | Siemens SIMATIC S7-300 CPUs 资源管理错误漏洞 — SIMATIC S7-300 CPUs | 7.5 | - | 2019-04-17 |
| CVE-2019-6569 | 多款Siemens产品安全漏洞 — SCALANCE X204-2 CWE-440 | - | - | 2019-03-26 |
| CVE-2018-16563 | Siemens EN100 Ethernet Communication module和SIPROTEC 5 Relays 安全漏洞 — Firmware variant IEC 61850 for EN100 Ethernet module | 5.9 | - | 2019-03-21 |
| CVE-2018-16556 | Siemens SIMATIC S7-400 输入验证错误漏洞 — SIMATIC S7-400 CPU 412-1 DP V7 CWE-20 | 7.5 | High | 2018-12-13 |
| CVE-2018-16557 | Siemens SIMATIC S7-400 数据伪造问题漏洞 — SIMATIC S7-400 CPU 412-1 DP V7 CWE-347 | 8.2 | High | 2018-12-13 |
| CVE-2018-4833 | 多款Siemens产品输入验证错误漏洞 — RFID 181EIP CWE-122 | 8.8 | - | 2018-06-14 |
| CVE-2018-4842 | Siemens SCALANCE X-200 IRT和SCALANCE X-300 跨站脚本漏洞 — SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) CWE-79 | 4.8 | - | 2018-06-14 |
| CVE-2018-4848 | Siemens SCALANCE X-200 IRT 跨站脚本漏洞 — SCALANCE X-200 switch family (incl. SIPLUS NET variants) CWE-80 | 9.1 | - | 2018-06-14 |
| CVE-2018-4832 | Siemens多款产品输入验证错误漏洞 — OpenPCS 7 V7.1 and earlier CWE-20 | 6.5 | - | 2018-04-24 |
| CVE-2018-4843 | Siemens SIMATIC CP 343-1 Advanced 输入验证错误漏洞 — SIMATIC S7-400 CPU 414-3 PN/DP V7 CWE-20 | 6.5 | Medium | 2018-03-20 |
| CVE-2018-4839 | 多款Siemens产品加密问题漏洞 — DIGSI 4 CWE-326 | 5.9 | - | 2018-03-08 |
| CVE-2018-4840 | 多款Siemens产品访问控制错误漏洞 — DIGSI 4 CWE-306 | 7.5 | - | 2018-03-08 |
| CVE-2018-4834 | Siemens Desigo PXC Series 代码问题漏洞 — Desigo PXC00-E.D V4.10 CWE-306 | 9.8 | Critical | 2018-01-24 |
| CVE-2017-12736 | 多款Siemens产品安全漏洞 — RUGGEDCOM i800 CWE-1188 | 8.8 | High | 2017-12-26 |
| CVE-2017-12741 | 多款Siemens产品资源管理错误漏洞 — Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller CWE-400 | 7.5 | High | 2017-12-26 |
| CVE-2017-12734 | Siemens LOGO!8 BM 信息泄露漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-895 | 7.5 | - | 2017-08-30 |
| CVE-2017-12735 | Siemens LOGO!8 BM 安全漏洞 — LOGO! 8 BM (incl. SIPLUS variants) CWE-300 | 7.4 | - | 2017-08-30 |
| CVE-2017-2681 | 多款Siemens产品资源管理错误漏洞 — Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller CWE-400 | 6.5 | Medium | 2017-05-11 |
| CVE-2017-2680 | Siemens SIMATIC 资源管理错误漏洞 — Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller CWE-400 | 6.5 | Medium | 2017-05-11 |
This page lists every published CVE security advisory associated with Siemens. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.