Siemens AG SINUMERIK 840D sl

Name: Siemens AG SINUMERIK 840D sl
Brand: Siemens AG

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical11high16medium1low

updated 2026-10-25

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0708US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-05-16	—
CVE-2019-11477US	high7.5	98.7% (100th)	Exploit	no fix	2019-06-19	≤ 4.8 SP5
CVE-2017-5753US	medium5.6	93.8% (100th)	Exploit	no fix	2018-01-04	≥ 50.5
CVE-2017-5754US	medium5.6	84.2% (100th)	Exploit	no fix	2018-01-04	≥ 50.5
CVE-2017-5715US	medium5.6	74.0% (99th)	Exploit	no fix	2018-01-04	≥ 50.5
CVE-2018-3639US	medium5.5	60.6% (99th)	Exploit	no fix	2018-05-22	—
CVE-2019-11478US	high7.5	94.7% (100th)	—	no fix	2019-06-19	≤ 4.8 SP5
CVE-2019-11479US	high7.5	91.7% (100th)	—	no fix	2019-06-19	≤ 4.8 SP5
CVE-2018-3646US	medium5.6	8.57% (95th)	—	no fix	2018-08-14	—
CVE-2018-3640US	medium5.6	7.46% (94th)	—	no fix	2018-05-22	—
CVE-2018-3615US	medium6.4	6.30% (94th)	—	no fix	2018-08-14	—
CVE-2018-3620US	medium5.6	5.58% (93rd)	—	no fix	2018-08-14	—
CVE-2018-11458US	high8.1	4.59% (92nd)	—	no fix	2018-12-12	2 versions
CVE-2018-11457US	high8.1	4.59% (92nd)	—	no fix	2018-12-12	2 versions
CVE-2018-11466US	critical9.8	4.08% (91st)	—	no fix	2018-12-12	2 versions
CVE-2018-11462US	critical9.8	3.76% (90th)	—	no fix	2018-12-12	2 versions
CVE-2017-12741US	high7.5	3.31% (89th)	—	no fix	2017-12-26	≤ 4.8
CVE-2019-10936US	medium5.0	2.07% (81st)	—	no fix	2019-10-10	—
CVE-2018-11464US	low3.7	1.86% (79th)	—	no fix	2018-12-12	2 versions
CVE-2019-18336US	high7.5	1.72% (77th)	—	V4.94	2020-03-10	3 versions
CVE-2018-12130US	medium5.6	1.57% (75th)	—	no fix	2019-05-30	—
CVE-2018-12127US	medium5.6	1.51% (74th)	—	no fix	2019-05-30	—
CVE-2018-12126US	medium5.6	1.51% (74th)	—	no fix	2019-05-30	—
CVE-2019-10923US	medium5.0	1.40% (72nd)	—	no fix	2019-10-10	—
CVE-2017-2680US	medium6.5	1.15% (67th)	—	no fix	2017-05-11	2 versions
CVE-2019-11091US	medium5.6	0.61% (49th)	—	no fix	2019-05-30	—
CVE-2025-40820US	—	0.49% (41st)	—	no fix	2025-12-09	—
CVE-2018-11463US	high7.8	0.46% (39th)	—	no fix	2018-12-12	2 versions
CVE-2018-11465US	high7.8	0.43% (36th)	—	no fix	2018-12-12	2 versions
CVE-2018-11460US	high7.8	0.38% (30th)	—	no fix	2018-12-12	2 versions
CVE-2018-11459US	high7.8	0.38% (30th)	—	no fix	2018-12-12	2 versions
CVE-2018-11461US	medium6.6	0.35% (28th)	—	no fix	2018-12-12	2 versions
CVE-2025-40833US	—	0.32% (24th)	—	no fix	2026-05-12	—
CVE-2025-40743US	—OT elevated	0.24% (15th)	—	no fix	2025-08-12	≤ 4.95 SP5
CVE-2024-43781US	—	0.15% (4th)	—	no fix	2024-09-10	≤ 4.95 SP3
CVE-2024-41171US	—	0.14% (3rd)	—	no fix	2024-09-10	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-203Observable Discrepancy10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-385Covert Timing Channel6 CVEs
CWE-264CWE-2645 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-208Observable Timing Discrepancy4 CVEs
CWE-693Protection Mechanism Failure4 CVEs

sources (2)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)36 CVEs
EUEU Vulnerability Database (ENISA)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan