Security Resilience

← All vendors

Siemens

CPE vendor key: siemens · 290 CVEs published in the last 24 months.

CVEs (365 d)
72
no change vs prior 30d
Avg CVSS (365 d)
7.32
over 72 CVEs
Avg EPSS pct (365 d)
0.28
higher = more likely exploited
KEV hit rate (365 d)
11.1%
8 of 72 added to CISA KEV
LLM-credited CVEs
0
none detected

Monthly CVE volume — last 24 months

202420252026077
Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

CritHighMedLow
Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

telecontrol_server_basic
71
tecnomatix_plant_simulation
24
scalance_lpe9403_firmware
19
scalance_lpe9403
19
solid_edge_se2025
13
simatic_cn_4100
12
simatic_cn_4100_firmware
12
sinec_nms
11
solid_edge_se2024
11
teamcenter_visualization
11
Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

CWE-89
71
CWE-125
31
CWE-787
24
CWE-78
15
CWE-22
8
CWE-121
8
CWE-79
7
CWE-20
7
CWE-306
6
CWE-122
6
Distinct CVEs assigned each weakness.

Known exploited, all time (31)

PublishedCVE
2026-07-04CVE-2026-53362
2026-05-13CVE-2026-0257
2026-05-06CVE-2026-0300
2026-04-22CVE-2026-31431
2026-01-27CVE-2026-24858
2026-01-13CVE-2025-25249
2025-12-09CVE-2025-59718
2025-11-17CVE-2025-13223
2025-10-13CVE-2025-39964
2025-09-24CVE-2025-10585
2025-09-05CVE-2025-39682
2024-11-19CVE-2024-50302
2024-01-08CVE-2022-2586
2023-10-10CVE-2023-44487
2023-10-03CVE-2023-4911
2022-04-01CVE-2022-22965
2022-03-10CVE-2022-0847
2022-01-28CVE-2021-4034
2021-12-14CVE-2021-45046
2021-12-10CVE-2021-44228
2021-09-16CVE-2021-40438
2019-05-16CVE-2019-0708
2017-05-02CVE-2017-5689
2017-03-17CVE-2017-0143
2017-03-17CVE-2017-0144
2017-03-17CVE-2017-0145
2017-03-17CVE-2017-0146
2017-03-17CVE-2017-0147
2017-03-17CVE-2017-0148
2016-11-18CVE-2016-8562
2014-04-07CVE-2014-0160
Attributed by CPE rather than by CISA's vendor name, so it includes CVEs filed under another vendor whose affected-product list names this one — shared library code is the usual reason. Broader, and noisier, than the name-matched card above on purpose.

Generated 16 October 2026 12:22 UTC .