CyberSecBulletin

Siemens vulnerabilities

We track 1,652 vulnerabilities in Siemens products across 60+ products. 1,648 are rated high or critical, and 38 have been exploited in real attacks. The most recent was published on November 10, 2026.

1,652vulnerabilities
215critical
1,433high
38exploited
8.0average CVSS score

Latest Siemens vulnerabilities

  • 7.8 High severity

    SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Improper Privilege Management

    CVE-2023-26604SiemensEPSS 1.05%

    systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other prog

  • 9.1 Critical severity

    https://github.com/curl/curl: Cleartext Transmission of Sensitive Information

    CVE-2023-23914Https://github.com/curl/curl

    A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure

  • 7.5 High severity

    An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass…

    CVE-2023-24329SiemensEPSS 20.5%

    An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

  • 7.4 High severity

    gnutls: Observable Discrepancy

    CVE-2023-0361GnuTLSEPSS 1.45%

    A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful

  • 7.8 High severity

    Parasolid V34.0: Out-of-bounds Read

    CVE-2023-25140Siemens

    A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12)

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24996Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24995Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24994Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24993Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24992Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24991Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24990Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24989Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24988Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24987Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24986Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24985Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24984Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24983Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24982Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24981Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24980Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Out-of-bounds Write

    CVE-2023-24979Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacke

  • 7.8 High severity

    Tecnomatix Plant Simulation: Access of Uninitialized Pointer

    CVE-2023-24978Siemens

    A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to e

  • 7.8 High severity

    Solid Edge SE2022: Use After Free

    CVE-2023-24581Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a use-after-free vulnerability that could be triggered w

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Write

    CVE-2023-24566Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-24564Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing speciall

  • 7.8 High severity

    Solid Edge SE2022: Access of Uninitialized Pointer

    CVE-2023-24563Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacke

  • 7.8 High severity

    Solid Edge SE2022: Access of Uninitialized Pointer

    CVE-2023-24562Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacke

  • 7.8 High severity

    Solid Edge SE2022: Access of Uninitialized Pointer

    CVE-2023-24561Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacke

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Write

    CVE-2023-24560Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24559Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24558Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24557Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24556Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24555Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24554Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24553Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially craft

  • 7.8 High severity

    Solid Edge SE2022: Out-of-bounds Read

    CVE-2023-24552Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafte

  • 7.8 High severity

    Solid Edge SE2022: Heap-based Buffer Overflow

    CVE-2023-24551Siemens

    A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker