Browse all 1674 CVE security advisories affecting Siemens. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Siemens operates as a global industrial technology conglomerate, primarily manufacturing automation systems, power infrastructure, and medical imaging devices. Its extensive portfolio of programmable logic controllers and human-machine interfaces frequently exposes critical vulnerabilities, with recorded Common Vulnerabilities and Exposures numbering in the thousands. Historically, these systems have suffered from remote code execution flaws, buffer overflows, and insecure default configurations that allow unauthorized privilege escalation. Notable incidents include the Stuxnet worm, which exploited Siemens PLCs to disrupt Iranian nuclear centrifuges, highlighting the severe physical consequences of digital compromise in industrial control environments. The company has since strengthened its security posture through firmware updates and secure-by-design principles, yet legacy devices remain vulnerable due to long operational lifecycles and limited patching capabilities in isolated networks.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-40949 | Siemens多款产品 操作系统命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-78 | 9.1 | Critical | 2026-05-12 |
| CVE-2025-40948 | Siemens多款产品 参数注入漏洞 — RUGGEDCOM ROX MX5000 CWE-88 | 6.8 | Medium | 2026-05-12 |
| CVE-2025-40947 | Siemens RUGGEDCOM 操作系统命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-78 | 7.5 | High | 2026-05-12 |
| CVE-2024-56840 | Siemens RUGGEDCOM ROX II 注入漏洞 — RUGGEDCOM ROX MX5000 CWE-74 | 7.2 | High | 2025-12-09 |
| CVE-2024-56839 | Siemens RUGGEDCOM ROX II 注入漏洞 — RUGGEDCOM ROX MX5000 CWE-74 | 7.2 | High | 2025-12-09 |
| CVE-2024-56838 | Siemens RUGGEDCOM ROX II 注入漏洞 — RUGGEDCOM ROX MX5000 CWE-74 | 7.2 | High | 2025-12-09 |
| CVE-2024-56837 | Siemens RUGGEDCOM ROX II 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 7.2 | High | 2025-12-09 |
| CVE-2024-56836 | Siemens RUGGEDCOM ROX II 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 7.5 | High | 2025-12-09 |
| CVE-2024-56835 | Siemens RUGGEDCOM ROX II 注入漏洞 — RUGGEDCOM ROX MX5000 CWE-74 | 8.8 | High | 2025-12-09 |
| CVE-2025-40761 | Siemens多款产品 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-288 | 7.6 | High | 2025-08-12 |
| CVE-2025-33023 | Siemens多款产品 代码问题漏洞 — RUGGEDCOM ROX MX5000 CWE-434 | 4.1 | Medium | 2025-08-12 |
| CVE-2025-40591 | Siemens多款产品 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-602 | 7.7 | High | 2025-06-10 |
| CVE-2025-33025 | Siemens多款产品 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-602 | 9.9 | Critical | 2025-05-13 |
| CVE-2025-33024 | Siemens多款产品 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-602 | 9.9 | Critical | 2025-05-13 |
| CVE-2025-32469 | siemens多款产品 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-602 | 9.9 | Critical | 2025-05-13 |
| CVE-2020-28398 | Siemens RUGGEDCOM 安全漏洞 — RUGGEDCOM ROX MX5000 CWE-352 | 8.8 | High | 2024-12-10 |
| CVE-2023-36755 | Siemens RUGGEDCOM ROX 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36754 | Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36753 | Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36752 | Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36751 | Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36750 | Siemens RUGGEDCOM ROX 系列多款产品 命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 9.1 | Critical | 2023-07-11 |
| CVE-2023-36749 | Siemens RUGGEDCOM ROX 加密问题漏洞 — RUGGEDCOM ROX MX5000 CWE-327 | 7.4 | High | 2023-07-11 |
| CVE-2023-36748 | Siemens RUGGEDCOM ROX 系列多款产品 加密问题漏洞 — RUGGEDCOM ROX MX5000 CWE-326 | 5.9 | Medium | 2023-07-11 |
| CVE-2023-36390 | Siemens RUGGEDCOM ROX 系列多款产品 跨站脚本漏洞 — RUGGEDCOM ROX MX5000 CWE-79 | 8.8 | High | 2023-07-11 |
| CVE-2023-36389 | Siemens RUGGEDCOM ROX 跨站脚本漏洞 — RUGGEDCOM ROX MX5000 CWE-79 | 8.8 | High | 2023-07-11 |
| CVE-2023-36386 | Siemens RUGGEDCOM ROX 系列多款产品 跨站脚本漏洞 — RUGGEDCOM ROX MX5000 CWE-79 | 8.8 | High | 2023-07-11 |
| CVE-2022-29562 | Siemens RUGGEDCOM ROX 输入验证错误漏洞 — RUGGEDCOM ROX MX5000 CWE-20 | 3.7 | Low | 2023-07-11 |
| CVE-2022-29561 | Siemens RUGGEDCOM ROX 跨站请求伪造漏洞 — RUGGEDCOM ROX MX5000 CWE-352 | 7.5 | High | 2023-07-11 |
| CVE-2022-29560 | Siemens RUGGEDCOM ROX 系列命令注入漏洞 — RUGGEDCOM ROX MX5000 CWE-77 | 5.5 | - | 2022-07-12 |
This page lists every published CVE security advisory associated with Siemens. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.