Siemens Sidis Prime vulnerabilities

7 CVEs affecting Siemens Sidis Prime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-66035, published 2025-11-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-6965, published 2025-07-15. High severity, CVSS 7.7. EPSS: 73.3% chance of exploitation in the next 30 days. There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We…
CVE-2024-9143, published 2024-10-16. Medium severity, CVSS 4.3. EPSS: 5.8% chance of exploitation in the next 30 days. Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound…
CVE-2024-5535, published 2024-06-27. Critical severity, CVSS 9.1. EPSS: 5.6% chance of exploitation in the next 30 days. Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A…
CVE-2025-9232, published 2025-09-30. Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days. Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority…
CVE-2025-9230, published 2025-09-30. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may…
CVE-2024-41996, published 2024-08-26. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily…
CVE-2025-66035, published 2025-11-26. High severity, CVSS 7.7. EPSS: 0.7% chance of exploitation in the next 30 days. Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF…