Siemens Simcenter Nastran

Name: Siemens Simcenter Nastran
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical16high3medium1low

updated 2026-10-28

vulnerabilities (65)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-10585US	critical9.8OT critical	8.97% (95th)	KEV	no fix	2025-09-24	≤ vers:unknown/*
CVE-2025-13223US	—OT critical	4.90% (92nd)	KEV	no fix	2025-11-17	≤ vers:unknown/*
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	no fix	2023-10-18	≤ vers:unknown/*
CVE-2018-25032US	high7.5	51.7% (99th)	Exploit	no fix	2022-03-25	≤ vers:unknown/*
CVE-2022-37434US	critical9.8	19.2% (97th)	Exploit	no fix	2022-08-05	≤ vers:unknown/*
CVE-2025-26465US	medium6.8	7.72% (95th)	Exploit	no fix	2025-02-18	≤ vers:unknown/*
CVE-2025-32462US	high8.8OT high	4.48% (91st)	Exploit	no fix	2025-06-30	≤ vers:unknown/*
CVE-2022-23303US	critical9.8	3.05% (88th)	Exploit	no fix	2022-01-17	≤ vers:unknown/*
CVE-2026-0273US	high7.2	1.34% (71st)	Exploit	no fix	2026-06-10	≤ vers:unknown/*
CVE-2025-5222US	—	0.44% (38th)	Exploit	no fix	2025-05-27	≤ vers:unknown/*
CVE-2017-14919US	high7.5	8.30% (95th)	—	no fix	2017-10-30	≤ vers:unknown/*
CVE-2016-9841US	critical9.8	7.55% (94th)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2005-2096US	high7.5	5.63% (93rd)	—	no fix	2005-07-06	≤ vers:unknown/*
CVE-2016-9842US	high8.8	5.20% (92nd)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2016-9840US	high8.8	4.88% (92nd)	—	no fix	2017-05-23	≤ vers:unknown/*
CVE-2019-9494US	medium5.9	3.88% (90th)	—	no fix	2019-04-17	≤ vers:unknown/*
CVE-2019-9495US	low3.7OT elevated	3.48% (89th)	—	no fix	2019-04-17	≤ vers:unknown/*
CVE-2023-45853US	critical9.8	3.45% (89th)	—	no fix	2023-10-14	≤ vers:unknown/*
CVE-2022-48174US	critical9.8	3.16% (88th)	—	no fix	2023-08-22	≤ vers:unknown/*
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2025-9232US	—	2.00% (81st)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2022-23304US	critical9.8	1.91% (80th)	—	no fix	2022-01-17	≤ vers:unknown/*
CVE-2025-9230US	—	1.55% (75th)	—	no fix	2025-09-30	≤ vers:unknown/*
CVE-2026-5121US	—	1.09% (65th)	—	no fix	2026-03-30	≤ vers:unknown/*
CVE-2026-58115US	—OT elevated	0.95% (61st)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-3014US	—	0.78% (56th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-69109US	—	0.62% (50th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-56451US	—	0.50% (42nd)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2025-5914US	high7.8	0.47% (41st)	—	no fix	2025-06-09	≤ vers:unknown/*
CVE-2026-22184US	high7.8	0.41% (35th)	—	no fix	2026-01-07	≤ vers:unknown/*
CVE-2026-23573US	—	0.39% (32nd)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2022-37660US	—OT elevated	0.38% (32nd)	—	no fix	2025-02-11	≤ vers:unknown/*
CVE-2025-40587US	—	0.30% (23rd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-7891DE	critical9.1	0.27% (20th)	—	no fix	2026-05-07	≤ vers:unknown/*
CVE-2026-25656US	—	0.27% (19th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-25655US	—	0.27% (19th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-54429US	—	0.27% (18th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-0272US	high7.2OT elevated	0.26% (18th)	—	no fix	2026-06-10	≤ vers:unknown/*
CVE-2026-59839US	—	0.25% (16th)	—	no fix	2026-07-14	≤ vers:unknown/*
CVE-2026-59693US	—	0.24% (15th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-0836US	—OT elevated	0.21% (12th)	—	no fix	2025-12-16	≤ vers:unknown/*
CVE-2025-40936US	—	0.20% (10th)	—	no fix	2025-11-17	≤ vers:unknown/*
CVE-2026-23720US	high7.3	0.18% (7th)	—	V2512	2026-02-10	4 versions
CVE-2026-23715US	high7.3	0.18% (7th)	—	V2512	2026-02-10	4 versions
CVE-2026-69108US	—	0.17% (6th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2025-40945US	—	0.16% (6th)	—	V2606	2026-07-14	4 versions
CVE-2026-23718US	high7.3	0.16% (5th)	—	V2512	2026-02-10	4 versions
CVE-2026-64629US	—	0.15% (5th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-59701US	—	0.15% (5th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-59700US	—	0.15% (5th)	—	no fix	2026-08-11	≤ vers:unknown/*

showing 50 of 65

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read15 CVEs
CWE-787Out-of-bounds Write9 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-203Observable Discrepancy4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)65 CVEs
USCISA CSAF OT advisories (ICS)8 CVEs
EUEU Vulnerability Database (ENISA)8 CVEs
DESiemens ProductCERT (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan