Siemens vulnerabilities
We track 1,652 vulnerabilities in Siemens products across 60+ products. 1,648 are rated high or critical, and 38 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Siemens vulnerabilities
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetUsers' method. This could allow an authenticated remote attacker to bypass author
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockGateway' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockGateway' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetGateways' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportConnectionVariables' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetActiveConnectionVariables' method. This could allow an authenticated remote attac
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetConnectionVariables' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariableArchivingBuffering' method. This could allow an authenticate
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariablesWithImport' method. This could allow an authenticated remot
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProjectUserRights' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProjectUserRights' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectUserRights' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProjectCrossCommunications' method. This could allow an authenticated remote att
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectCrossCommunications' method. This could allow an authenticated remote a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ActivateProject' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetActiveProjects' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'GetProjects' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'LockProject' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'DeleteProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateOpcSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateGateways' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateProject' method. This could allow an authenticated remote attacker to bypass a
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateBufferingSettings' method. This could allow an authenticated remote attacker t
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateSmtpSettings' method. This could allow an authenticated remote attacker to byp
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateTcmSettings' method. This could allow an authenticated remote attacker to bypa
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateDatabaseSettings' method. This could allow an authenticated remote attacker to
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateUsers' method. This could allow an authenticated remote attacker to bypass aut
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'ImportDatabase' method. This could allow an authenticated remote attacker to bypass
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateProjectConnections' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'UpdateConnectionVariables' method. This could allow an authenticated remote attacker
- 8.8 High severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'RestoreFromBackup' method. This could allow an authenticated remote attacker to bypa
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'Authenticate' method. This could allow an unauthenticated remote attacker to bypass
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'VerifyUser' method. This could allow an unauthenticated remote attacker to bypass au
- 9.8 Critical severity
TeleControl Server Basic: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected application is vulnerable to SQL injection through the internally used 'CreateTrace' method. This could allow an unauthenticated remote attacker to bypass a
- 7.1 High severity
Linux: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff/0x790 Read of size 4 at addr ffff88807b
- 7.1 High severity
Linux: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There are actually 2 problems: - deleting the last element doesn't require the memmove of elements [i + 1, en
- 7.8 High severity
Linux: Use After Free
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiple times without a vhost_scsi_clear_endpoint between them, we can hit multiple