Log in Start free

Siemens AG

Products

ProductCVEsExploitedLatest
SICAM SGU9–Jul 14, 2020
SICAM T9–Jul 14, 2020
SICAM MMU9–Jul 14, 2020
SIMATIC RTLS Locating Manager3–Sep 9, 2020
Polarion Subversion Webclient2–Sep 9, 2020
Spectrum Power 42–Sep 9, 2020
SICAM WEB firmware for SICAM A8000 RTUs1–Aug 14, 2020
SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants)1–Jul 14, 2020
SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants)1–Jul 14, 2020
SIMATIC HMI Comfort Panels (incl. SIPLUS variants)1–Jul 14, 2020
SIMATIC HMI KTP700F Mobile Arctic1–Jul 14, 2020
SIMATIC HMI Mobile Panels 2nd Generation1–Jul 14, 2020
SIMATIC S7-200 SMART CPU family1–Jul 14, 2020
SIMATIC WinCC Runtime Advanced1–Jul 14, 2020
Siveillance Video Client1–Sep 9, 2020
Automation License Manager 51–Aug 14, 2020
Spectrum Power™ 51–Mar 10, 2020
Automation License Manager 61–Aug 14, 2020
Desigo CC1–Aug 14, 2020
Desigo CC Compact1–Aug 14, 2020
License Management Utility (LMU)1–Sep 9, 2020
LOGO! 8 BM (incl. SIPLUS variants)1–Jul 14, 2020

Exploited and recent CVEs

  • CVE-2020-15790 Unrated A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server might be susceptible to a directory listing attack. 0.9%
  • CVE-2020-15789 Unrated A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into ac 0.5%
  • CVE-2020-15788 Unrated A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross-Site Scripting. If 0.7%
  • CVE-2020-15785 Unrated A vulnerability has been identified in Siveillance Video Client (All versions). In environments where Windows NTLM authentication is enabled the affected client application transmits usernames to the 0.6%
  • CVE-2020-15784 Unrated A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). Insecure storage of sensitive information in the configuration files could allow the retrieval of user names. 0.6%
  • CVE-2020-10056 Unrated A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server whil 0.4%
  • CVE-2020-10051 Unrated A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is 0.3%
  • CVE-2020-10050 Unrated A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include 0.3%
  • CVE-2020-10049 Unrated A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The start-stop scripts for the services of the affected application could allow a local attacker to inclu 0.3%
  • CVE-2020-7583 Unrated A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileg 0.3%
  • CVE-2020-10055 Unrated A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) tha 6.0%
  • CVE-2020-7583 Unrated A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privileg 0.3%
  • CVE-2020-15781 Unrated A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30). The login screen does not sufficiently sanitize input, which enables an attacker to generate spe 1.0%
  • CVE-2020-10055 Unrated A vulnerability has been identified in Desigo CC (V4.x), Desigo CC (V3.x), Desigo CC Compact (V4.x), Desigo CC Compact (V3.x). Affected applications are delivered with a 3rd party component (BIRT) tha 6.0%
  • CVE-2020-7592 Unrated A vulnerability has been identified in SIMATIC HMI Basic Panels 1st Generation (incl. SIPLUS variants) (All versions), SIMATIC HMI Basic Panels 2nd Generation (incl. SIPLUS variants) (All versions), S 0.3%
  • CVE-2020-7593 Unrated A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (V1.81.01 - V1.81.03), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.01), LOGO! 8 BM (incl. SIPLUS variants) (V1.82.02). A buffer 8.7%
  • CVE-2020-10043 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsu 0.6%
  • CVE-2020-10045 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker 1.1%
  • CVE-2020-10042 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might e 1.9%
  • CVE-2020-10044 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install speci 0.8%
  • CVE-2020-10041 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in diffe 0.8%
  • CVE-2020-10043 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsu 0.6%
  • CVE-2020-10045 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker 1.1%
  • CVE-2020-10042 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might e 1.9%
  • CVE-2020-10044 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install speci 0.8%
  • CVE-2020-10041 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A stored Cross-Site-Scripting (XSS) vulnerability is present in diffe 0.8%
  • CVE-2020-10043 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). The web server could allow Cross-Site Scripting (XSS) attacks if unsu 0.6%
  • CVE-2020-10045 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure could allow an attacker 1.1%
  • CVE-2020-10042 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). A buffer overflow in various positions of the web application might e 1.9%
  • CVE-2020-10044 Unrated A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with access to the network could be able to install speci 0.8%