Siemens SINUMERIK ONE

Name: Siemens SINUMERIK ONE
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical12high3medium1low

updated 2026-10-27

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	≤ vers:all/<V6.24
CVE-2025-40766US	—	0.18% (8th)	Exploit	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2020-15782US	critical9.8	5.18% (92nd)	—	V6.15	2021-05-28	3 versions
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	≤ vers:unknown/<v6.25sp1
CVE-2025-32988US	high8.2	1.47% (74th)	—	no fix	2025-07-10	≤ vers:unknown/<v6.25sp1
CVE-2025-32989US	—	1.47% (74th)	—	no fix	2025-07-10	≤ vers:unknown/<v6.25sp1
CVE-2025-0665US	—	1.33% (71st)	—	no fix	2025-02-05	≤ vers:unknown/<v6.25sp1
CVE-2025-3277US	critical9.8	1.25% (69th)	—	no fix	2025-04-14	≤ vers:unknown/<v6.25sp1
CVE-2023-46156US	—	1.24% (69th)	—	V6.24	2023-12-12	3 versions
CVE-2023-28831US	high7.5	1.13% (66th)	—	V6.22	2023-09-12	0 → V6.22
CVE-2025-32990US	high8.2	0.90% (59th)	—	no fix	2025-07-10	≤ vers:unknown/<v6.25sp1
CVE-2025-6395US	—	0.77% (55th)	—	no fix	2025-07-10	≤ vers:unknown/<v6.25sp1
CVE-2025-40746US	high7.2	0.67% (52nd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-3360US	—	0.65% (51st)	—	no fix	2025-04-07	≤ vers:unknown/<v6.25sp1
CVE-2025-29087US	high7.5	0.52% (44th)	—	no fix	2025-04-07	≤ vers:unknown/<v6.25sp1
CVE-2025-0395US	—	0.36% (29th)	—	no fix	2025-01-22	≤ vers:unknown/<v6.25sp1
CVE-2022-30694US	—	0.32% (25th)	—	V6.22	2022-11-08	3 versions
CVE-2025-33023US	—	0.29% (22nd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-21694US	medium5.5	0.24% (15th)	—	no fix	2025-02-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40743US	—OT elevated	0.24% (15th)	—	V6.25_SP1	2025-08-12	4 versions
CVE-2022-38465US	high7.8	0.24% (15th)	—	V6.21	2022-10-11	3 versions
CVE-2025-40761US	—OT elevated	0.24% (15th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-29088US	medium5.5	0.22% (12th)	—	no fix	2025-04-10	≤ vers:unknown/<v6.25sp1
CVE-2022-24408US	high7.8	0.21% (11th)	—	V6.15_SP1	2022-03-08	3 versions
CVE-2025-30033US	—	0.21% (11th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-32728US	low3.8	0.20% (9th)	—	no fix	2025-04-10	≤ vers:unknown/<v6.25sp1
CVE-2025-40570US	—	0.20% (9th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40759US	—	0.18% (8th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-47809US	—	0.18% (7th)	—	no fix	2025-05-16	≤ vers:unknown/<v6.25sp1
CVE-2025-1390US	—	0.18% (7th)	—	no fix	2025-02-18	≤ vers:unknown/<v6.25sp1
CVE-2025-40584US	—	0.17% (7th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40762US	—	0.16% (5th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2024-43781US	—	0.15% (5th)	—	V6.23	2024-09-10	6 versions
CVE-2025-40764US	—	0.15% (4th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40769US	—	0.15% (4th)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2024-41171US	—	0.14% (3rd)	—	V6.24	2024-09-10	3 versions
CVE-2025-40768US	high7.8	0.14% (3rd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40767US	high7.8	0.13% (3rd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-30034US	medium5.5	0.13% (2nd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40751US	high7.8	0.12% (2nd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40770US	high7.0	0.12% (2nd)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40753US	—OT elevated	0.10% (1st)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1
CVE-2025-40752US	—OT elevated	0.10% (1st)	—	no fix	2025-08-12	≤ vers:unknown/<v6.25sp1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-190Integer Overflow or Wraparound6 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs

sources (4)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)34 CVEs
USCISA CSAF OT advisories (ICS)9 CVEs
EUEU Vulnerability Database (ENISA)9 CVEs
DESiemens ProductCERT (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan