{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Siemens vulnerabilities","home_page_url":"https://patchfirst.co/vendor/siemens/","feed_url":"https://patchfirst.co/feed/vendor/siemens.json","description":"New and newly exploited Siemens CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-110936#kev","url":"https://patchfirst.co/cve/CVE-2026-110936/","title":"[KEV] CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability","content_text":"Siemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.","summary":"Siemens Software Center Uncontrolled Search Path Element Vulnerability","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T13:10:11.000Z","tags":["kev","T1078","T1059","T1574.008"],"_patchfirst":{"reason":"kev","priority":65,"kev":{"dateAdded":"2026-10-20","ransomware":false},"epss":{"score":0.00967,"percentile":0.6171},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Siemens","product":"Software Center","techniqueIds":["T1078","T1059","T1574.008"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-44415","url":"https://patchfirst.co/cve/CVE-2026-44415/","title":"CVE-2026-44415: Affected systems do not properly restrict access to internal APIs and paths for authenticated users","content_text":"Siemens · Industrial Edge Device Kit - arm64 V1.10. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.1 CRITICAL. Priority 16.9 of 100.","summary":"Affected systems do not properly restrict access to internal APIs and paths for authenticated users","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T20:38:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00477,"percentile":0.41198},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"Industrial Edge Device Kit - arm64 V1.10","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63350","url":"https://patchfirst.co/cve/CVE-2026-63350/","title":"CVE-2026-63350: Affected devices do not properly restrict executable content contained in imported trace files","content_text":"Siemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 26.8% of CVEs). CVSS 9.6 CRITICAL. Priority 14.4 of 100.","summary":"Affected devices do not properly restrict executable content contained in imported trace files","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T20:38:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.4,"kev":null,"epss":{"score":0.00335,"percentile":0.26842},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"SIMATIC Drive Controller CPU 1504D TF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63354","url":"https://patchfirst.co/cve/CVE-2026-63354/","title":"CVE-2026-63354: Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…","content_text":"Siemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.8 of 100.","summary":"Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-16T18:17:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.8,"kev":null,"epss":{"score":0.00314,"percentile":0.24287},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"SIMATIC Drive Controller CPU 1504D TF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-63353","url":"https://patchfirst.co/cve/CVE-2026-63353/","title":"CVE-2026-63353: Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on…","content_text":"Siemens · SIMATIC Drive Controller CPU 1504D TF. Not in CISA KEV. EPSS 0.3% (higher than 24.3% of CVEs). CVSS 9.6 CRITICAL. Priority 13.8 of 100.","summary":"Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-15T20:38:04.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.8,"kev":null,"epss":{"score":0.00314,"percentile":0.24287},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"SIMATIC Drive Controller CPU 1504D TF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-58115","url":"https://patchfirst.co/cve/CVE-2026-58115/","title":"CVE-2026-58115: A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running…","content_text":"Siemens · SIMATIC IoT2050 Advanced. Not in CISA KEV. EPSS 1.0% (higher than 61.3% of CVEs). CVSS 10.0 CRITICAL. Priority 64.3 of 100.","summary":"A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running…","date_published":"2026-08-11T00:00:00.000Z","date_modified":"2026-08-12T19:19:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":64.3,"kev":null,"epss":{"score":0.00953,"percentile":0.61306},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"SIMATIC IoT2050 Advanced","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2016-8562#kev","url":"https://patchfirst.co/cve/CVE-2016-8562/","title":"[KEV] CVE-2016-8562: Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","content_text":"Siemens · SIMATIC CP. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 3.6% (higher than 89.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1210 Exploitation of Remote Services; T1499.004 Application or System Exploitation. Priority 61.1 of 100.","summary":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","date_published":"2022-03-03T00:00:00.000Z","date_modified":"2026-06-17T00:54:31.000Z","tags":["kev","T1210","T1499.004"],"_patchfirst":{"reason":"kev","priority":61.1,"kev":{"dateAdded":"2022-03-03","ransomware":false},"epss":{"score":0.0361,"percentile":0.89471},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Siemens","product":"SIMATIC CP","techniqueIds":["T1210","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-15782","url":"https://patchfirst.co/cve/CVE-2020-15782/","title":"CVE-2020-15782: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open…","content_text":"Siemens · SIMATIC Drive Controller family. Not in CISA KEV. EPSS 5.2% (higher than 92.5% of CVEs). CVSS 9.8 CRITICAL. Named in 1 threat report. Priority 29.2 of 100.","summary":"A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open…","date_published":"2021-05-28T00:00:00.000Z","date_modified":"2026-06-02T18:50:38.000Z","tags":[],"_patchfirst":{"reason":"published","priority":29.2,"kev":null,"epss":{"score":0.05184,"percentile":0.92451},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Siemens","product":"SIMATIC Drive Controller family","techniqueIds":[],"reportCount":1,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-13922","url":"https://patchfirst.co/cve/CVE-2019-13922/","title":"CVE-2019-13922: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1)","content_text":"Siemens AG · SINEMA Remote Connect Server. Not in CISA KEV. EPSS 0.6% (higher than 46.1% of CVEs). Priority 9.2 of 100.","summary":"A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1)","date_published":"2019-09-13T00:00:00.000Z","date_modified":"2024-08-05T00:05:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":9.2,"kev":null,"epss":{"score":0.00552,"percentile":0.46101},"cvss":null,"vendor":"Siemens AG","product":"SINEMA Remote Connect Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}