Siemens SIMATIC PDM

Name: Siemens SIMATIC PDM
Brand: Siemens

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high1medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-0778US	high7.5	73.2% (99th)	Exploit	V9.2_SP2	2022-03-15	< V9.2_SP2
CVE-2021-3449US	medium5.9	63.5% (99th)	Exploit	no fix	2021-03-25	≤ All versions >= V9.1 SP7 < V9.2 SP1
CVE-2017-2684US	critical9.0	1.99% (81st)	—	V9.1	2017-02-22	< V9.1
CVE-2021-31893US	high7.8	0.56% (47th)	—	V9.2	2021-07-13	3 versions
CVE-2020-7585US	high7.8	0.45% (39th)	—	V9.2	2020-06-10	3 versions
CVE-2020-7586US	high7.8	0.42% (36th)	—	V9.2	2020-06-10	3 versions
CVE-2021-31894US	high8.8	0.23% (13th)	—	V9.2_SP2	2021-07-13	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-1357Reliance on Insufficiently Trustworthy Component1 CVEs
CWE-427Uncontrolled Search Path Element1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-592DEPRECATED: Authentication Bypass Issues1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.