Siemens SINUMERIK 840D sl

Name: Siemens SINUMERIK 840D sl
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical24high14medium1low

updated 2026-10-25

vulnerabilities (82)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-1974US	—	99.4% (100th)	Exploit	no fix	2025-03-25	≤ vers:unknown/<*
CVE-2019-11477US	high7.5	98.7% (100th)	Exploit	no fix	2019-06-19	≤ All versions < V4.8 SP5
CVE-2015-0235US	high10.0	94.6% (100th)	Exploit	no fix	2015-01-28	≤ 4.7
CVE-2025-1098US	—	82.3% (100th)	Exploit	no fix	2025-03-25	≤ vers:unknown/<*
CVE-2025-1097US	—	33.2% (98th)	Exploit	no fix	2025-03-25	≤ vers:unknown/<*
CVE-2025-24514US	—	30.5% (98th)	Exploit	no fix	2025-03-25	≤ vers:unknown/<*
CVE-2024-5535US	—	5.58% (93rd)	Exploit	no fix	2024-06-27	≤ vers:unknown/<*
CVE-2022-21658US	medium6.3	1.38% (72nd)	Exploit	no fix	2022-01-20	≤ vers:unknown/<*
CVE-2025-40766US	—	0.18% (7th)	Exploit	no fix	2025-08-12	≤ vers:unknown/<v4.95sp5
CVE-2019-11478US	high7.5	94.7% (100th)	—	no fix	2019-06-19	≤ All versions < V4.8 SP5
CVE-2019-11479US	high7.5	91.7% (100th)	—	no fix	2019-06-19	≤ All versions < V4.8 SP5
CVE-2023-3446US	medium5.3	6.53% (94th)	—	no fix	2023-07-19	≤ vers:unknown/<*
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	≤ vers:unknown/<*
CVE-2023-5678US	medium5.3	4.46% (91st)	—	no fix	2023-11-06	≤ vers:unknown/<*
CVE-2023-5363US	high7.5	3.33% (89th)	—	no fix	2023-10-25	≤ vers:unknown/<*
CVE-2025-24513US	—	3.33% (89th)	—	no fix	2025-03-25	≤ vers:unknown/<*
CVE-2017-12741US	high7.5	3.31% (89th)	—	V4.8_SP3	2017-12-26	3 versions
CVE-2024-0727US	medium5.5	3.19% (88th)	—	no fix	2024-01-26	≤ vers:unknown/<*
CVE-2023-3817US	medium5.3	3.05% (87th)	—	no fix	2023-07-31	≤ vers:unknown/<*
CVE-2024-30105US	—	2.94% (87th)	—	no fix	2024-07-09	≤ vers:unknown/<*
CVE-2024-21319US	—	2.89% (87th)	—	no fix	2024-01-09	≤ vers:unknown/<*
CVE-2019-8460US	high7.5	2.25% (83rd)	—	no fix	2019-08-26	≤ All versions < V4.8 SP5
CVE-2019-10936US	medium5.0	2.07% (81st)	—	V4.8_SP6	2019-10-10	3 versions
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	≤ vers:unknown/<v4.95sp5
CVE-2019-18336US	high7.5	1.72% (77th)	—	V4.94	2020-03-10	2 versions
CVE-2020-15783US	high7.5	1.67% (77th)	—	no fix	2020-11-12	3 versions
CVE-2023-4807US	high7.8	1.58% (75th)	—	no fix	2023-09-08	≤ vers:unknown/<*
CVE-2025-32988US	high8.2	1.47% (74th)	—	no fix	2025-07-10	≤ vers:unknown/<v4.95sp5
CVE-2025-32989US	—	1.47% (74th)	—	no fix	2025-07-10	≤ vers:unknown/<v4.95sp5
CVE-2023-7104US	high7.3	1.46% (73rd)	—	no fix	2023-12-29	≤ vers:unknown/<*
CVE-2019-10923US	medium5.0	1.40% (72nd)	—	V4.8_SP5	2019-10-10	3 versions
CVE-2025-0665US	—	1.33% (71st)	—	no fix	2025-02-05	≤ vers:unknown/<v4.95sp5
CVE-2025-3277US	critical9.8	1.25% (69th)	—	no fix	2025-04-14	≤ vers:unknown/<v4.95sp5
CVE-2024-0056US	—OT elevated	1.18% (67th)	—	no fix	2024-01-09	≤ vers:unknown/<*
CVE-2024-41790US	high7.2	0.91% (60th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2024-41789US	high7.2	0.91% (60th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2024-41788US	high7.2	0.91% (60th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2025-32990US	high8.2	0.90% (59th)	—	no fix	2025-07-10	≤ vers:unknown/<v4.95sp5
CVE-2025-6395US	—	0.77% (55th)	—	no fix	2025-07-10	≤ vers:unknown/<v4.95sp5
CVE-2024-54092US	—	0.76% (55th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2020-15791US	medium6.5	0.72% (53rd)	—	no fix	2020-09-09	2 versions
CVE-2025-40746US	high7.2	0.67% (51st)	—	no fix	2025-08-12	≤ vers:unknown/<v4.95sp5
CVE-2024-41794US	critical9.8OT elevated	0.63% (49th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2023-2975US	medium5.3	0.62% (49th)	—	no fix	2023-07-14	≤ vers:unknown/<*
CVE-2024-23814US	—	0.62% (49th)	—	*	2025-02-11	4 versions
CVE-2024-41792US	high7.5	0.58% (47th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2024-41793US	high7.5OT elevated	0.55% (45th)	—	no fix	2025-04-08	≤ vers:unknown/<*
CVE-2025-3360US	—	0.53% (44th)	—	no fix	2025-04-07	≤ vers:unknown/<v4.95sp5
CVE-2025-29087US	high7.5	0.52% (44th)	—	no fix	2025-04-07	≤ vers:unknown/<v4.95sp5
CVE-2025-40820US	—	0.49% (41st)	—	*	2025-12-09	3 versions

showing 50 of 82

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation14 CVEs
CWE-400Uncontrolled Resource Consumption14 CVEs
CWE-190Integer Overflow or Wraparound6 CVEs
CWE-404Improper Resource Shutdown or Release4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-125Out-of-bounds Read3 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)69 CVEs
DESiemens ProductCERT (CSAF)12 CVEs
USCISA CSAF OT advisories (ICS)11 CVEs
EUEU Vulnerability Database (ENISA)9 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan