Out-of-bounds read in Siemens SIMATIC CP 1604
Priority MEDIUM 42CWE-125Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.
Summary
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01401 72nd percentileScored 2026-11-07
Fix Fixed SIMATIC CP 443-1 (Siemens): V3.3SIMATIC CP 443-1 Advanced (Siemens): V3.3+39 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | SIMATIC CP 1604 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 1616 | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 343-1 Advanced | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIMATIC CP 443-1 OPC UA | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC ET 200pro IM154-8 PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM154-8F PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC ET 200pro IM154-8FX PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM151-8 PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC ET 200S IM151-8F PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) | before V2.1.6 | V2.1.6 | Patch available | CNA |
| Siemens | SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) | before V2.7 | V2.7 | Patch available | CNA |
| Siemens | SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) | All versions < V15.1 Upd4 | — | No fix listed | CNA |
| Siemens | SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) | All versions < V15.1 Upd4 | — | No fix listed | CNA |
| Siemens | SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F | All versions < V15.1 Upd4 | — | No fix listed | CNA |
| Siemens | SIMATIC IPC DiagMonitor | before V5.1.3 | V5.1.3 | Patch available | CNA |
| Siemens | SIMATIC RF182C | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC RF185C | before V1.1.0 | V1.1.0 | Patch available | CNA |
| Siemens | SIMATIC RF186C | before V1.1.0 | V1.1.0 | Patch available | CNA |
| Siemens | SIMATIC RF188C | before V1.1.0 | V1.1.0 | Patch available | CNA |
| Siemens | SIMATIC RF600R family | before V3.2.1 | V3.2.1 | Patch available | CNA |
| Siemens | SIMATIC RFID 181EIP | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) | before V2.6.1 | V2.6.1 | Patch available | CNA |
| Siemens | SIMATIC S7-1500 Software Controller | before V2.7 | V2.7 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 314C-2 PN/DP | before V3.3.16 | V3.3.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315F-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 315T-3 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317F-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317T-3 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 317TF-3 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319-3 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-300 CPU 319F-3 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC S7-PLCSIM Advanced | All versions < V2.0 SP1 UPD1 | — | No fix listed | CNA |
| Siemens | SIMATIC Teleservice Adapter IE Advanced | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC Teleservice Adapter IE Basic | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC Teleservice Adapter IE Standard | All versions | — | No fix listed | CNA |
| Siemens | SIMATIC WinAC RTX 2010 | All versions < V2010 SP3 | — | No fix listed | CNA |
| Siemens | SIMATIC WinAC RTX F 2010 | All versions < V2010 SP3 | — | No fix listed | CNA |
| Siemens | SIMATIC WinCC Runtime Advanced | All versions < V15.1 Upd4 | — | No fix listed | CNA |
| Siemens | SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) | before V1.1.3 | V1.1.3 | Patch available | CNA |
| Siemens | SIMOCODE pro V PROFINET (incl. SIPLUS variants) | before V2.1.3 | V2.1.3 | Patch available | CNA |
| Siemens | SINAMICS G130 V4.6 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G130 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G130 V4.7 SP1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G130 V4.8 Control Unit | All versions < V4.8 HF6 | — | No fix listed | CNA |
| Siemens | SINAMICS G130 V5.1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G130 V5.1 SP1 Control Unit | All versions < V5.1 SP1 HF4 | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V4.6 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V4.7 SP1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V4.8 Control Unit | All versions < V4.8 HF6 | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V5.1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS G150 V5.1 SP1 Control Unit | All versions < V5.1 SP1 HF4 | — | No fix listed | CNA |
| Siemens | SINAMICS GH150 V4.7 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS GH150 V4.8 (Control Unit) | All versions < V4.8 SP2 HF9 | — | No fix listed | CNA |
| Siemens | SINAMICS GL150 V4.7 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS GL150 V4.8 (Control Unit) | All versions < V4.8 SP2 HF9 | — | No fix listed | CNA |
| Siemens | SINAMICS GM150 V4.7 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS GM150 V4.8 (Control Unit) | All versions < V4.8 SP2 HF9 | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants) | All versions < V4.8 HF6 | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants) | All versions < V5.1 SP1 HF4 | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V4.6 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V4.7 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V4.7 SP1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V4.8 Control Unit | All versions < V4.8 HF6 | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V5.1 Control Unit | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS S150 V5.1 SP1 Control Unit | All versions < V5.1 SP1 HF4 | — | No fix listed | CNA |
| Siemens | SINAMICS S210 | All versions < V5.1 SP1 HF8 | — | No fix listed | CNA |
| Siemens | SINAMICS SL150 V4.7 (Control Unit) | All versions < V4.7 HF33 | — | No fix listed | CNA |
| Siemens | SINAMICS SL150 V4.8 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS SM120 V4.7 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SINAMICS SM120 V4.8 (Control Unit) | All versions < V4.8 SP2 HF10 | — | No fix listed | CNA |
| Siemens | SINAMICS SM150 V4.8 (Control Unit) | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS ET 200S IM151-8 PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIPLUS ET 200S IM151-8F PN/DP CPU | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIPLUS NET CP 343-1 Advanced | All versions | — | No fix listed | CNA |
| Siemens | SIPLUS NET CP 443-1 | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS NET CP 443-1 Advanced | before V3.3 | V3.3 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 314C-2 PN/DP | before V3.3.16 | V3.3.16 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 315F-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SIPLUS S7-300 CPU 317F-2 PN/DP | before V3.2.16 | V3.2.16 | Patch available | CNA |
| Siemens | SITOP Manager | before V1.1 | V1.1 | Patch available | CNA |
| Siemens | SITOP PSU8600 | before V1.5 | V1.5 | Patch available | CNA |
| Siemens | SITOP UPS1600 (incl. SIPLUS variants) | before V2.3 | V2.3 | Patch available | CNA |
| Siemens | TIM 1531 IRC (incl. SIPLUS NET variants) | before V2.1 | V2.1 | Patch available | CNA |
- SIMATIC CP 1604 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC CP 1616 VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC CP 343-1 Advanced VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIMATIC CP 443-1 OPC UA VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC ET 200pro IM154-8 PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC ET 200pro IM154-8F PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC ET 200pro IM154-8FX PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC ET 200S IM151-8 PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC ET 200S IM151-8F PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) VendorSiemens Affected before V2.1.6 Fixed in V2.1.6 Patch available CNA
- SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) VendorSiemens Affected before V2.7 Fixed in V2.7 Patch available CNA
- SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants) VendorSiemens Affected All versions < V15.1 Upd4 Fixed in — No fix listed CNA
- SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants) VendorSiemens Affected All versions < V15.1 Upd4 Fixed in — No fix listed CNA
- SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F VendorSiemens Affected All versions < V15.1 Upd4 Fixed in — No fix listed CNA
- SIMATIC IPC DiagMonitor VendorSiemens Affected before V5.1.3 Fixed in V5.1.3 Patch available CNA
- SIMATIC RF182C VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC RF185C VendorSiemens Affected before V1.1.0 Fixed in V1.1.0 Patch available CNA
- SIMATIC RF186C VendorSiemens Affected before V1.1.0 Fixed in V1.1.0 Patch available CNA
- SIMATIC RF188C VendorSiemens Affected before V1.1.0 Fixed in V1.1.0 Patch available CNA
- SIMATIC RF600R family VendorSiemens Affected before V3.2.1 Fixed in V3.2.1 Patch available CNA
- SIMATIC RFID 181EIP VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) VendorSiemens Affected before V2.6.1 Fixed in V2.6.1 Patch available CNA
- SIMATIC S7-1500 Software Controller VendorSiemens Affected before V2.7 Fixed in V2.7 Patch available CNA
- SIMATIC S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.3.16 Fixed in V3.3.16 Patch available CNA
- SIMATIC S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 315T-3 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 317T-3 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 317TF-3 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 319-3 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-300 CPU 319F-3 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC S7-PLCSIM Advanced VendorSiemens Affected All versions < V2.0 SP1 UPD1 Fixed in — No fix listed CNA
- SIMATIC Teleservice Adapter IE Advanced VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC Teleservice Adapter IE Basic VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC Teleservice Adapter IE Standard VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIMATIC WinAC RTX 2010 VendorSiemens Affected All versions < V2010 SP3 Fixed in — No fix listed CNA
- SIMATIC WinAC RTX F 2010 VendorSiemens Affected All versions < V2010 SP3 Fixed in — No fix listed CNA
- SIMATIC WinCC Runtime Advanced VendorSiemens Affected All versions < V15.1 Upd4 Fixed in — No fix listed CNA
- SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) VendorSiemens Affected before V1.1.3 Fixed in V1.1.3 Patch available CNA
- SIMOCODE pro V PROFINET (incl. SIPLUS variants) VendorSiemens Affected before V2.1.3 Fixed in V2.1.3 Patch available CNA
- SINAMICS G130 V4.6 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G130 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G130 V4.7 SP1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G130 V4.8 Control Unit VendorSiemens Affected All versions < V4.8 HF6 Fixed in — No fix listed CNA
- SINAMICS G130 V5.1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G130 V5.1 SP1 Control Unit VendorSiemens Affected All versions < V5.1 SP1 HF4 Fixed in — No fix listed CNA
- SINAMICS G150 V4.6 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G150 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G150 V4.7 SP1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G150 V4.8 Control Unit VendorSiemens Affected All versions < V4.8 HF6 Fixed in — No fix listed CNA
- SINAMICS G150 V5.1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS G150 V5.1 SP1 Control Unit VendorSiemens Affected All versions < V5.1 SP1 HF4 Fixed in — No fix listed CNA
- SINAMICS GH150 V4.7 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS GH150 V4.8 (Control Unit) VendorSiemens Affected All versions < V4.8 SP2 HF9 Fixed in — No fix listed CNA
- SINAMICS GL150 V4.7 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS GL150 V4.8 (Control Unit) VendorSiemens Affected All versions < V4.8 SP2 HF9 Fixed in — No fix listed CNA
- SINAMICS GM150 V4.7 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS GM150 V4.8 (Control Unit) VendorSiemens Affected All versions < V4.8 SP2 HF9 Fixed in — No fix listed CNA
- SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions < V4.8 HF6 Fixed in — No fix listed CNA
- SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants) VendorSiemens Affected All versions < V5.1 SP1 HF4 Fixed in — No fix listed CNA
- SINAMICS S150 V4.6 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S150 V4.7 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S150 V4.7 SP1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S150 V4.8 Control Unit VendorSiemens Affected All versions < V4.8 HF6 Fixed in — No fix listed CNA
- SINAMICS S150 V5.1 Control Unit VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS S150 V5.1 SP1 Control Unit VendorSiemens Affected All versions < V5.1 SP1 HF4 Fixed in — No fix listed CNA
- SINAMICS S210 VendorSiemens Affected All versions < V5.1 SP1 HF8 Fixed in — No fix listed CNA
- SINAMICS SL150 V4.7 (Control Unit) VendorSiemens Affected All versions < V4.7 HF33 Fixed in — No fix listed CNA
- SINAMICS SL150 V4.8 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS SM120 V4.7 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SINAMICS SM120 V4.8 (Control Unit) VendorSiemens Affected All versions < V4.8 SP2 HF10 Fixed in — No fix listed CNA
- SINAMICS SM150 V4.8 (Control Unit) VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS ET 200S IM151-8 PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIPLUS ET 200S IM151-8F PN/DP CPU VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIPLUS NET CP 343-1 Advanced VendorSiemens Affected All versions Fixed in — No fix listed CNA
- SIPLUS NET CP 443-1 VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS NET CP 443-1 Advanced VendorSiemens Affected before V3.3 Fixed in V3.3 Patch available CNA
- SIPLUS S7-300 CPU 314C-2 PN/DP VendorSiemens Affected before V3.3.16 Fixed in V3.3.16 Patch available CNA
- SIPLUS S7-300 CPU 315-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIPLUS S7-300 CPU 315F-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIPLUS S7-300 CPU 317-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SIPLUS S7-300 CPU 317F-2 PN/DP VendorSiemens Affected before V3.2.16 Fixed in V3.2.16 Patch available CNA
- SITOP Manager VendorSiemens Affected before V1.1 Fixed in V1.1 Patch available CNA
- SITOP PSU8600 VendorSiemens Affected before V1.5 Fixed in V1.5 Patch available CNA
- SITOP UPS1600 (incl. SIPLUS variants) VendorSiemens Affected before V2.3 Fixed in V2.3 Patch available CNA
- TIM 1531 IRC (incl. SIPLUS NET variants) VendorSiemens Affected before V2.1 Fixed in V2.1 Patch available CNA
CPE configurations NVD · 125
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:* | before 1.1.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp343-1_advanced_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp343-1_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_cp443-1_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp443-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:cp1604_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:cp1604:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:cp1616_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:cp1616:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp343-1_advanced_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp343-1_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_cp443-1_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp443-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Show 115 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:siemens:simatic_cp443-1_advanced_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_cp443-1_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:* | before 2.1.6 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* | before 2.7 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:a:siemens:simatic_cp443-1_opc_ua:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_ipc_diagmonitor:*:*:*:*:*:*:*:* | before 5.1.3 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* | before 2.7 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:-:*:*:*:*:*:* | 2.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:sp1:*:*:*:*:*:* | 2.0 sp1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* | before 15.1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:-:*:*:*:*:*:* | 15.1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update1:*:*:*:*:*:* | 15.1 update1 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update2:*:*:*:*:*:* | 15.1 update2 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update3:*:*:*:*:*:* | 15.1 update3 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:sitop_manager:*:*:*:*:*:*:*:* | before 1.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_rf600r_firmware:*:*:*:*:*:*:*:* | before 3.2.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf600r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* | before 1.1.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:* | before 1.1.0 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_rf181-eip_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_rf181-eip:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* | before 2.6.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:* | before 3.3.17 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_pn_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-400_pn\/dp_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-400_pn\/dp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* | before 2010 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:* | 2010 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simocode_pro_v_eip_firmware:*:*:*:*:*:*:*:* | before 1.1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simocode_pro_v_eip:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simocode_pro_v_pn_firmware:*:*:*:*:*:*:*:* | before 2.1.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simocode_pro_v_pn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* | before 5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* | before 5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* | before 5.2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* | before 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:-:*:*:*:*:*:* | 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1:*:*:*:*:*:* | 5.1 sp1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1_hotfix2:*:*:*:*:*:* | 5.1 sp1_hotfix2 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:*:*:*:*:*:*:*:* | before 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:* | 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:* | 5.1 sp1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:* | before 1.5 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sitop_ups1600_firmware:*:*:*:*:*:*:*:* | before 2.3 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sitop_ups1600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* | before 2.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500f_firmware:*:*:*:*:*:*:*:* | before 2.6.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500f:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500s_firmware:*:*:*:*:*:*:*:* | before 2.6.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:simatic_s7-1500t_firmware:*:*:*:*:*:*:*:* | before 2.6.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:* | before 4.8 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:* | 4.8 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
| cpe:2.3:o:siemens:sinamics_sm150_firmware:*:*:*:*:*:*:*:* | before 5.1 | Vulnerable | Siemens |
| cpe:2.3:o:siemens:sinamics_sm150_firmware:5.1:-:*:*:*:*:*:* | 5.1 | Vulnerable | Siemens |
| cpe:2.3:h:siemens:sinamics_sm150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Siemens |
- cpe:2.3:o:siemens:simatic_cp443-1_advanced_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_cp443-1_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc_firmware:*:*:*:*:*:*:*:* Versions before 2.1.6 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2_firmware:*:*:*:*:*:*:*:* Versions before 2.7 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_et_200_sp_open_controller_cpu_1515sp_pc2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_comfort_panels_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_comfort_panels:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp400f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp400f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp700f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp700f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_ktp900f_firmware:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels_ktp900f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:a:siemens:simatic_cp443-1_opc_ua:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_ipc_diagmonitor:*:*:*:*:*:*:*:* Versions before 5.1.3 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_s7-1500_software_controller:*:*:*:*:*:*:*:* Versions before 2.7 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:-:*:*:*:*:*:* Versions 2.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_s7-plcsim_advanced:2.0:sp1:*:*:*:*:*:* Versions 2.0 sp1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:* Versions before 15.1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:-:*:*:*:*:*:* Versions 15.1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update1:*:*:*:*:*:* Versions 15.1 update1 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update2:*:*:*:*:*:* Versions 15.1 update2 Vulnerable ·Siemens
- cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:15.1:update3:*:*:*:*:*:* Versions 15.1 update3 Vulnerable ·Siemens
- cpe:2.3:a:siemens:sitop_manager:*:*:*:*:*:*:*:* Versions before 1.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_rf600r_firmware:*:*:*:*:*:*:*:* Versions before 3.2.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf600r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:* Versions before 1.1.0 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf182c_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf182c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_rf181-eip_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_rf181-eip:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500_firmware:*:*:*:*:*:*:*:* Versions before 2.6.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-300_firmware:*:*:*:*:*:*:*:* Versions before 3.3.17 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_pn_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-400_pn\/dp_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-400_pn\/dp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_advanced_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_advanced:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_basic_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_basic:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_teleservice_adapter_ie_standard_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_teleservice_adapter_ie_standard:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_firmware:*:*:*:*:*:*:*:* Versions before 2010 Vulnerable ·Siemens
- cpe:2.3:o:siemens:simatic_winac_rtx_firmware:2010:-:*:*:*:*:*:* Versions 2010 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_winac_rtx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simocode_pro_v_eip_firmware:*:*:*:*:*:*:*:* Versions before 1.1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simocode_pro_v_eip:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simocode_pro_v_pn_firmware:*:*:*:*:*:*:*:* Versions before 2.1.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simocode_pro_v_pn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g130_firmware:*:*:*:*:*:*:*:* Versions before 5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g130:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_g150_firmware:*:*:*:*:*:*:*:* Versions before 5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_g150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s120_firmware:*:*:*:*:*:*:*:* Versions before 5.2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s150_firmware:*:*:*:*:*:*:*:* Versions before 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1:*:*:*:*:*:* Versions 5.1 sp1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s150_firmware:5.1:sp1_hotfix2:*:*:*:*:*:* Versions 5.1 sp1_hotfix2 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:*:*:*:*:*:*:*:* Versions before 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_s210_firmware:5.1:sp1:*:*:*:*:*:* Versions 5.1 sp1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_s210:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sitop_psu8600_firmware:*:*:*:*:*:*:*:* Versions before 1.5 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sitop_psu8600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sitop_ups1600_firmware:*:*:*:*:*:*:*:* Versions before 2.3 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sitop_ups1600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:* Versions before 2.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500f_firmware:*:*:*:*:*:*:*:* Versions before 2.6.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500s_firmware:*:*:*:*:*:*:*:* Versions before 2.6.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:simatic_s7-1500t_firmware:*:*:*:*:*:*:*:* Versions before 2.6.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:simatic_s7-1500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gh150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gh150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gh150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gl150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gl150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gl150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_gm150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_gm150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_gm150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_sl150_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_sl150_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_sl150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_sm120_firmware:*:*:*:*:*:*:*:* Versions before 4.8 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_sm120_firmware:4.8:-:*:*:*:*:*:* Versions 4.8 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_sm120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
- cpe:2.3:o:siemens:sinamics_sm150_firmware:*:*:*:*:*:*:*:* Versions before 5.1 Vulnerable ·Siemens
- cpe:2.3:o:siemens:sinamics_sm150_firmware:5.1:-:*:*:*:*:*:* Versions 5.1 Vulnerable ·Siemens
- cpe:2.3:h:siemens:sinamics_sm150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
Remediation
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIMATIC ET 200pro IM154-8 PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC ET 200pro IM154-8F PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC ET 200pro IM154-8FX PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC ET 200S IM151-8 PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC ET 200S IM151-8F PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (Siemens) Fixed in V2.1.6
- Fix · CNA SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (Siemens) Fixed in V2.7
- Fix · CNA SIMATIC IPC DiagMonitor (Siemens) Fixed in V5.1.3
- Fix · CNA SIMATIC RF185C (Siemens) Fixed in V1.1.0
- Fix · CNA SIMATIC RF186C (Siemens) Fixed in V1.1.0
- Fix · CNA SIMATIC RF188C (Siemens) Fixed in V1.1.0
- Fix · CNA SIMATIC RF600R family (Siemens) Fixed in V3.2.1
- Fix · CNA SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (Siemens) Fixed in V2.6.1
- Fix · CNA SIMATIC S7-1500 Software Controller (Siemens) Fixed in V2.7
- Fix · CNA SIMATIC S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.3.16
- Fix · CNA SIMATIC S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 315T-3 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 317T-3 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 317TF-3 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 319-3 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMATIC S7-300 CPU 319F-3 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIMOCODE pro V Ethernet/IP (incl. SIPLUS variants) (Siemens) Fixed in V1.1.3
- Fix · CNA SIMOCODE pro V PROFINET (incl. SIPLUS variants) (Siemens) Fixed in V2.1.3
- Fix · CNA SIPLUS ET 200S IM151-8 PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIPLUS ET 200S IM151-8F PN/DP CPU (Siemens) Fixed in V3.2.16
- Fix · CNA SIPLUS NET CP 443-1 (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS NET CP 443-1 Advanced (Siemens) Fixed in V3.3
- Fix · CNA SIPLUS S7-300 CPU 314C-2 PN/DP (Siemens) Fixed in V3.3.16
- Fix · CNA SIPLUS S7-300 CPU 315-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIPLUS S7-300 CPU 315F-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIPLUS S7-300 CPU 317-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SIPLUS S7-300 CPU 317F-2 PN/DP (Siemens) Fixed in V3.2.16
- Fix · CNA SITOP Manager (Siemens) Fixed in V1.1
- Fix · CNA SITOP PSU8600 (Siemens) Fixed in V1.5
- Fix · CNA SITOP UPS1600 (incl. SIPLUS variants) (Siemens) Fixed in V2.3
- Fix · CNA TIM 1531 IRC (incl. SIPLUS NET variants) (Siemens) Fixed in V2.1
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6568
- 2026-10-03 Alias added: GHSA-gm8r-2vc4-2wvx
References
More Siemens Cp1604 Firmware vulnerabilities
- TI-2019-08144 Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO… CVSS 3.1HIGH 7.5
Sources
- CVE-2019-6568 · CVE Program
- CVE-2019-6568 · NVD
- FIRST EPSS
- GHSA-gm8r-2vc4-2wvx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences