Siemens Industrial Edge Management — known CVE vulnerabilities

Every CVE whose affected-product data names Siemens Industrial Edge Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-44228 — CVSS 10.0 (critical) — actively exploited: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log…
• CVE-2021-37184 — CVSS 9.8 (critical): A vulnerability has been identified in Industrial Edge Management (All versions < V1.3). An unauthenticated attacker could change the the…
• CVE-2021-45046 — CVSS 9.0 (critical) — actively exploited: It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could…
• CVE-2022-40147 — CVSS 7.4 (high): A vulnerability has been identified in Industrial Edge Management (All versions < V1.5.1). The affected software does not properly validate…
• CVE-2024-45385 — CVSS 4.7 (medium): A vulnerability has been identified in Industrial Edge Management OS (IEM-OS) (All versions). Affected components are vulnerable to…