Siemens AG SIMATIC PCS 7

Name: Siemens AG SIMATIC PCS 7
Brand: Siemens AG

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical10high6medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-10922US	critical9.8OT elevated	2.64% (85th)	—	no fix	2019-05-14	—
CVE-2019-10918US	high8.8	1.93% (80th)	—	no fix	2019-05-14	4 versions
CVE-2019-10916US	high8.8	1.54% (75th)	—	no fix	2019-05-14	4 versions
CVE-2019-19282US	high7.1	1.34% (71st)	—	no fix	2020-03-10	3 versions
CVE-2019-10935US	high7.2	1.30% (70th)	—	no fix	2019-07-11	4 versions
CVE-2023-25910US	high8.8	1.00% (63rd)	—	no fix	2023-06-13	—
CVE-2021-40360US	high8.8	0.68% (52nd)	—	no fix	2022-02-09	2 versions
CVE-2024-35783US	—	0.61% (49th)	—	no fix	2024-09-10	≤ 7.5 SP2 Update 18
CVE-2024-30321US	—	0.51% (44th)	—	no fix	2024-07-09	≤ 9.1
CVE-2017-6865US	medium6.5	0.47% (40th)	—	no fix	2017-05-11	2 versions
CVE-2020-7585US	high7.8	0.45% (39th)	—	no fix	2020-06-10	≤ 9.0 SP3
CVE-2020-7586US	high7.8	0.42% (36th)	—	no fix	2020-06-10	≤ 9.0 SP3
CVE-2016-7165US	medium6.4	0.38% (32nd)	—	no fix	2016-11-15	4 versions
CVE-2023-28829US	high8.8	0.29% (22nd)	—	no fix	2023-06-13	3 versions
CVE-2023-48364US	medium6.5	0.27% (19th)	—	no fix	2024-02-13	≤ 9.1
CVE-2023-48363US	medium6.5	0.27% (19th)	—	no fix	2024-02-13	≤ 9.1
CVE-2019-10917US	medium5.5	0.27% (18th)	—	no fix	2019-05-14	4 versions
CVE-2023-46280US	—	0.26% (18th)	—	no fix	2024-05-14	≤ 9.1
CVE-2022-24287US	medium4.6OT elevated	0.24% (15th)	—	no fix	2022-05-20	≤ 9.1
CVE-2025-30033US	—	0.21% (11th)	—	no fix	2025-08-12	5 versions
CVE-2023-50821US	—	0.18% (8th)	—	no fix	2024-04-09	9.1 → 9.1 SP2 UC04
CVE-2021-40363US	high7.8OT elevated	0.16% (5th)	—	no fix	2022-02-09	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-284Improper Access Control2 CVEs
CWE-427Uncontrolled Search Path Element2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.