Siemens SIMATIC PCS neo V4.0

Name: Siemens SIMATIC PCS neo V4.0
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical1high0medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-3935US	—	1.97% (80th)	—	no fix	2023-09-13	≤ vers:all/*
CVE-2024-49775US	—	1.50% (74th)	—	*	2024-12-16	3 versions
CVE-2023-28831US	high7.5	1.13% (66th)	—	*	2023-09-12	3 versions
CVE-2024-33698US	—	1.05% (64th)	—	*	2024-09-10	3 versions
CVE-2024-45386US	—	0.56% (46th)	—	*	2025-02-11	3 versions
CVE-2022-45147US	—	0.23% (13th)	—	*	2024-07-09	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.