How many CVEs does siemens have?

siemens has 3,608 published CVE records since 1999, including 1,095 in the last two years.

How many siemens CVEs are in CISA KEV?

Yes — 26 of siemens's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which siemens products have the most CVEs?

The siemens products with the most published CVEs are SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, RUGGEDCOM RST2428P.

What are the most common weakness types in siemens CVEs?

siemens's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-122 (Heap-based Buffer Overflow).

Are there public exploits for siemens vulnerabilities?

Yes — 218 of siemens's CVEs have a known public exploit.

How many critical siemens vulnerabilities are there?

siemens has 384 critical and 1,742 high-severity CVEs.

What is the average severity of siemens CVEs?

The average CVSS base score across siemens's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

3,608 CVEs

26 in CISA KEV

siemens Vulnerabilities

Name: siemens vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for siemens.

3,608

Total CVEs

Published

26

In CISA KEV

Exploited in the wild

218

Public exploits

PoC or exploit code

7.0

Avg CVSS

1999–2026

Overview

siemens has 3,608 published CVE records since 1999, of which 26 are in CISA's Known Exploited Vulnerabilities catalog and 218 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting siemens products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on siemens's vulnerability posture, as a share of its 3,608 published CVEs.

Average CVSS: 7.0
Critical / high: 59%
Actively exploited (KEV): 1%
Public exploit available: 6%
Patch available: 87%

Severity and exploitation

How the CVSS severity of siemens's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical384

High1,742

Medium1,363

Low90

29 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

26

26 of siemens's CVEs are confirmed exploited in the wild.

Public exploits

218

218 of siemens's CVEs have a known public exploit available.

Most affected products

The siemens products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in siemens CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish siemens CVE records.

Disclosure activity by year

How many siemens CVEs were published each year.

2019

198

2020

143

2021

460

2022

367

2023

279

2024

696

2025

738

2026

357

Latest siemens CVEs

The most recently disclosed vulnerabilities affecting siemens.

Critical vulnerability · 2026-07-14
CWE-347
Critical · CVSS 10.0
EPSS 0.4%2026-07-14
Medium vulnerability · 2026-07-14
CWE-770
Medium · CVSS 6.0
EPSS 0.2%2026-07-14
High vulnerability · 2026-07-14
CWE-426
High · CVSS 8.5
EPSS 0.1%2026-07-14
High vulnerability · 2026-07-09
CWE-620
High · CVSS 8.6
EPSS 0.3%2026-07-09
Medium vulnerability · 2026-07-09
CWE-1188
Medium · CVSS 6.3
EPSS 0.1%2026-07-09
High vulnerability · 2026-07-09
CWE-489
High · CVSS 8.4
EPSS 0.1%2026-07-09
High vulnerability · 2026-07-09
CWE-489
High · CVSS 7.1
EPSS 0.2%2026-07-09
Medium vulnerability · 2026-06-30
CWE-94
Medium · CVSS 6.8
EPSS 0.2%2026-06-30
PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI
CWE-78
Medium · CVSS 6.1
EPSS 1.4%2026-06-10
PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)
CWE-862
Medium · CVSS 6.0
EPSS 0.3%2026-06-10
PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing
CWE-754
Medium · CVSS 4.6
EPSS 0.2%2026-06-10
PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface
CWE-79
Low · CVSS 1.1
EPSS 0.1%2026-06-10

Track new siemens CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor siemens CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

canonical4,320 CVEs mozilla3,666 CVEs openSUSE3,314 CVEs Apache Software Foundation3,182 CVEs Qualcomm3,033 CVEs HP2,526 CVEs Netapp2,519 CVEs Huawei2,383 CVEs

Browse all vendors

Frequently asked questions

Common questions about siemens vulnerabilities.

How many CVEs does siemens have?: siemens has 3,608 published CVE records since 1999, including 1,095 in the last two years.
How many siemens CVEs are in CISA KEV?: Yes — 26 of siemens's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Which siemens products have the most CVEs?: The siemens products with the most published CVEs are SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIMATIC S7-1500 TM MFP - GNU/Linux subsystem, RUGGEDCOM RST2428P.
What are the most common weakness types in siemens CVEs?: siemens's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-122 (Heap-based Buffer Overflow).
Are there public exploits for siemens vulnerabilities?: Yes — 218 of siemens's CVEs have a known public exploit.
How many critical siemens vulnerabilities are there?: siemens has 384 critical and 1,742 high-severity CVEs.
What is the average severity of siemens CVEs?: The average CVSS base score across siemens's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track siemens vulnerabilities

Monitor new siemens vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing