Browse all 1707 CVE security advisories affecting Siemens. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Siemens operates as a global industrial technology conglomerate, primarily manufacturing automation systems, power infrastructure, and medical imaging devices. Its extensive portfolio of programmable logic controllers and human-machine interfaces frequently exposes critical vulnerabilities, with recorded Common Vulnerabilities and Exposures numbering in the thousands. Historically, these systems have suffered from remote code execution flaws, buffer overflows, and insecure default configurations that allow unauthorized privilege escalation. Notable incidents include the Stuxnet worm, which exploited Siemens PLCs to disrupt Iranian nuclear centrifuges, highlighting the severe physical consequences of digital compromise in industrial control environments. The company has since strengthened its security posture through firmware updates and secure-by-design principles, yet legacy devices remain vulnerable due to long operational lifecycles and limited patching capabilities in isolated networks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-110936 | Siemens Software Center 未受控搜索路径漏洞 — Siemens Software Center CWE-427 | 6.7 | Medium | 2026-10-15 |
| CVE-2026-102076 | Apogee系列软件Web服务拒绝服务漏洞 — APOGEE MBC (PPC) (BACnet) CWE-121 | 7.5 | High | 2026-10-13 |
| CVE-2026-102075 | Apogee/Talon设备Web服务DoS漏洞 — APOGEE MBC (PPC) (BACnet) CWE-121 | 7.5 | High | 2026-10-13 |
| CVE-2026-102074 | Apogee系列软件FTP服务拒绝服务漏洞 — APOGEE MBC (PPC) (BACnet) CWE-121 | 7.5 | High | 2026-10-13 |
| CVE-2026-102073 | 艾礼富MBC/MEC/PXC/TALON远程内存读取及DoS — APOGEE MBC (PPC) (BACnet) CWE-191 | 8.2 | High | 2026-10-13 |
| CVE-2026-89208 | Desigo PXC系列多个型号远程内存越界读取漏洞 — Capital Embedded AR Classic 431-422 CWE-125 | 5.3 | Medium | 2026-10-13 |
| CVE-2026-89206 | RUGGEDCOM CROSSBOW 低于V6.0存在服务器端授权绕过漏洞 — RUGGEDCOM CROSSBOW CWE-602 | 6.3 | Medium | 2026-10-13 |
| CVE-2026-89205 | RUGGEDCOM CROSSBOW V6.0前版本服务器端授权绕过漏洞 — RUGGEDCOM CROSSBOW CWE-602 | 6.3 | Medium | 2026-10-13 |
| CVE-2026-89204 | RUGGEDCOM CROSSBOW <V6.0 数据库访问控制漏洞 — RUGGEDCOM CROSSBOW CWE-639 | 5.4 | Medium | 2026-10-13 |
| CVE-2026-89203 | RUGGEDCOM CROSSBOW <V6.0 信息泄露漏洞 — RUGGEDCOM CROSSBOW CWE-201 | 4.3 | Medium | 2026-10-13 |
| CVE-2026-89202 | RUGGEDCOM CROSSBOW权限提升拒绝服务漏洞 — RUGGEDCOM CROSSBOW CWE-639 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-89201 | RUGGEDCOM CROSSBOW <V6.0 SQL注入漏洞 — RUGGEDCOM CROSSBOW CWE-89 | 7.5 | High | 2026-10-13 |
| CVE-2026-89200 | RUGGEDCOM CROSSBOW SQL注入漏洞 — RUGGEDCOM CROSSBOW CWE-89 | 6.7 | Medium | 2026-10-13 |
| CVE-2026-89199 | RUGGEDCOM CROSSBOW < V6.0信息泄露漏洞 — RUGGEDCOM CROSSBOW CWE-639 | 8.8 | High | 2026-10-13 |
| CVE-2026-89198 | RUGGEDCOM CROSSBOW<6.0任意SQL注入漏洞 — RUGGEDCOM CROSSBOW CWE-89 | 8.8 | High | 2026-10-13 |
| CVE-2026-89197 | RUGGEDCOM CROSSBOW V6.0以下版本SQL注入漏洞 — RUGGEDCOM CROSSBOW CWE-89 | 8.8 | High | 2026-10-13 |
| CVE-2026-89196 | RUGGEDCOM CROSSBOW V6.0以下版本存在SQL注入漏洞 — RUGGEDCOM CROSSBOW CWE-89 | 8.8 | High | 2026-10-13 |
| CVE-2026-85115 | .NET Client Library for SIMATIC S7 多个版本密码泄露漏洞 — .NET Client Library for SIMATIC S7 Webserver API CWE-209 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-85114 | .NET Client Library <V3.3.61 路径遍历漏洞 — .NET Client Library for SIMATIC S7 Webserver API CWE-22 | 7.5 | High | 2026-10-13 |
| CVE-2026-78557 | Industrial Edge App Publisher V1.27.9以下版本RCE漏洞 — Industrial Edge App Publisher CWE-79 | 8.3 | High | 2026-10-13 |
| CVE-2026-78556 | Industrial Edge App Publisher TLS证书验证绕过漏洞 — Industrial Edge App Publisher CWE-295 | 7.4 | High | 2026-10-13 |
| CVE-2026-72895 | SIMATIC IPC系列安全启动绕过漏洞 — SIMATIC IPC BX-21A CWE-1394 | 7.7 | High | 2026-10-13 |
| CVE-2026-63357 | Hilscher NICOTEC NETpro SQLi XSS漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-63356 | RIGOL示波器CSV文件跨站脚本漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-63355 | Siemens PLC Trace页CSV导入XSS漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-63354 | Siemens PLCs XSS漏洞（读取诊断权限） — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 9.6 | Critical | 2026-10-13 |
| CVE-2026-63353 | Siemens Trace文件XSS漏洞：恶意JS执行并越权操控PLC — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 9.6 | Critical | 2026-10-13 |
| CVE-2026-63352 | OpenENERGY CSV导入存储XSS漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-63351 | S7-1500S7-1200CSV导入JavaScript执行漏洞 — SIMATIC Drive Controller CPU 1504D TF CWE-79 | 6.1 | Medium | 2026-10-13 |
| CVE-2026-63350 | Siemens Trace文件解析漏洞，导致浏览器端JS执行 — SIMATIC Drive Controller CPU 1504D TF CWE-95 | 9.6 | Critical | 2026-10-13 |
This page lists every published CVE security advisory associated with Siemens. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.