Siemens SIMATIC PCS neo

Name: Siemens SIMATIC PCS neo
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical10high8medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3449US	medium5.9	63.5% (99th)	Exploit	V3.1	2021-03-25	< V3.1
CVE-2021-20093US	critical9.1	33.3% (98th)	—	V3.1	2021-06-16	< V3.1
CVE-2020-7587US	high8.2	2.48% (85th)	—	V3.0_SP1	2020-07-14	3 versions
CVE-2020-7588US	medium5.3	2.15% (82nd)	—	V3.0_SP1	2020-07-14	3 versions
CVE-2020-14509US	critical9.8	2.07% (81st)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2020-16233US	high7.5	1.84% (79th)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2020-14513US	high7.5	1.56% (75th)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2023-46281US	high8.8	0.94% (61st)	—	V4.1	2023-12-12	3 versions
CVE-2023-46285US	—	0.91% (60th)	—	V4.1	2023-12-12	3 versions
CVE-2023-46284US	—	0.91% (60th)	—	V4.1	2023-12-12	3 versions
CVE-2023-46283US	—	0.91% (60th)	—	V4.1	2023-12-12	3 versions
CVE-2020-14515US	high7.5	0.84% (58th)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2020-14517US	critical9.8OT elevated	0.68% (52nd)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2020-14519US	high7.5	0.64% (50th)	—	V3.0 SP1 Update 1	2020-09-16	< V3.0 SP1 Update 1
CVE-2023-46098US	high8.8	0.62% (49th)	—	V4.1	2023-11-14	3 versions
CVE-2023-46282US	medium6.1	0.49% (42nd)	—	V4.1	2023-12-12	3 versions
CVE-2020-7580US	medium6.7	0.46% (40th)	—	V3.0_SP1	2020-06-10	3 versions
CVE-2023-46097US	high8.0	0.43% (37th)	—	V4.1	2023-11-14	3 versions
CVE-2026-46746US	—	0.43% (37th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2023-46099US	medium4.8	0.39% (33rd)	—	V4.1	2023-11-14	3 versions
CVE-2020-7581US	medium6.7	0.38% (32nd)	—	V3.0_SP1	2020-07-14	3 versions
CVE-2023-46096US	medium6.5OT elevated	0.32% (25th)	—	V4.1	2023-11-14	3 versions
CVE-2021-41057US	high7.1	0.30% (22nd)	—	V3.1 Upd1	2021-11-14	< V3.1 Upd1
CVE-2026-46747US	medium5.3	0.24% (15th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-46748US	high7.8	0.21% (11th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2025-40808US	—	0.19% (8th)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2024-54678US	—	0.17% (6th)	—	no fix	2025-08-12	≤ vers:unknown/*
CVE-2026-46749US	critical9.8	0.12% (2nd)	—	no fix	2026-06-09	≤ vers:unknown/*
CVE-2026-24349US	—	0.06% (0th)	—	no fix	2026-06-09	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-428Unquoted Search Path or Element2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-942Permissive Cross-domain Security Policy with Untrusted Domains2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs

sources (4)

Which sources assert this record, and when.

DESiemens ProductCERT (CSAF)21 CVEs
USCISA CSAF OT advisories (ICS)14 CVEs
EUEU Vulnerability Database (ENISA)13 CVEs
NLNCSC-NL (CSAF)7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan