Vulnerabilities

TI-2024-33749 CVE-2024-50310 · GHSA-84fj-mc2g-vcqc

Incorrect authorization in Siemens SIMATIC CP 1543-1 V4.0

MEDIUM 44

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00481 Published 2024-11-12 Fixed in V4.0.50 CWE-863

TI-2022-15627 CVE-2022-34820 · GHSA-6j7x-87cm-p532

Command injection in Siemens SIMATIC CP 1242-7 V2

MEDIUM 47

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02217 Published 2022-07-12 Fixed in V3.3.46, V3.0.22 CWE-77

TI-2022-15626 CVE-2022-34819 · GHSA-x7cp-9x6c-2mm8

Heap-based buffer overflow in Siemens SIMATIC CP 1242-7 V2

MEDIUM 53

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All versions < V3.3.46), SIMATIC CP 1243-7 LTE US (All versions…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02083 Published 2022-07-12 Fixed in V3.3.46, V3.0.22 CWE-122

TI-2022-15628 CVE-2022-34821 · GHSA-xx9f-xg2j-c647

Code injection in Siemens RUGGEDCOM RM1224 LTE EU

MEDIUM 45

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00…

CVSS 4.0HIGH 8.8 Adjacent network High privileges No interaction EPSS 0.02427 Published 2022-07-12 Fixed in V7.2, V2.3 +5 CWE-94

TI-2021-13090 CVE-2021-33716 · GHSA-9mhw-hmhp-8rm5

Cleartext storage of sensitive information in Siemens SIMATIC CP 1543-1

LOW 28

A vulnerability has been identified in SIMATIC CP 1543-1 (incl.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00253 Published 2021-09-14 Fixed in V3.0, V1.1 CWE-312

TI-2021-05785 CVE-2021-22924 · GHSA-qhhj-q26m-mrw8

Improper input validation in https://github.com/curl/curl

MEDIUM 51

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into ac…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0627 Published 2021-08-05 Partial fix CWE-20

TI-2019-09597 CVE-2019-12815 · GHSA-f989-xw5v-4w5p

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for…

HIGH 76

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.57333 Published 2019-07-19 No fix listed CWE-755

TI-2017-01923 CVE-2017-2681 · GHSA-j585-83xv-q5c7

Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…

LOW 33

Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service condition of that product.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00906 Published 2017-05-11 Fixed in V3.0, V4.03 +33 CWE-400

TI-2017-01922 CVE-2017-2680 · GHSA-4vvg-656r-c25j

Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…

LOW 34

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.01149 Published 2017-05-11 Fixed in V01.01.01, V3.0 +35 CWE-400

TI-2016-07034 CVE-2016-8562 · GHSA-f87x-hp4c-9cvw

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS…

CRITICAL 92KEV

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28).

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0361 Published 2016-11-18 No fix listed

TI-2016-07033 CVE-2016-8561 · GHSA-6xmx-v4m3-j532

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS…

LOW 32

A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28).

CVSS 3.0MEDIUM 6.6 Network High privileges No interaction EPSS 0.01585 Published 2016-11-18 No fix listed CWE-264

Vulnerabilities

Filters