Vulnerabilities

TI-2023-24796 CVE-2023-46156 · GHSA-5fwp-f47r-rg74

Use after free in Siemens SIMATIC Drive Controller CPU 1504D TF

MEDIUM 41

Affected devices improperly handle specially crafted packets sent to port 102/tcp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01244 Published 2023-12-12 Fixed in V3.1.0, V30.1.0 +4 CWE-416

TI-2023-13337 CVE-2023-28831 · GHSA-p7vc-4gr6-g2px

Integer overflow in Siemens SIMATIC BRAUMAT

MEDIUM 46

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01129 Published 2023-09-12 Fixed in V8.1 SP1, V2.2 +19 CWE-190

TI-2022-18278 CVE-2022-38773 · GHSA-4qpv-c2wc-cr4r

Affected devices do not contain an Immutable Root of Trust in Hardware.

LOW 30

Affected devices do not contain an Immutable Root of Trust in Hardware.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00305 Published 2023-01-10 No fix listed CWE-1326

TI-2022-12830 CVE-2022-30694 · GHSA-4f6c-cjgm-c8qx

Cross-site request forgery in Siemens SIMATIC Drive Controller CPU 1504D TF

LOW 29

The login endpoint /FormLogin in affected web services does not apply proper origin checking.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0036 Published 2022-11-08 Fixed in V2.9.7, V3.2.19 +6 CWE-352

TI-2022-18088 CVE-2022-38465 · GHSA-45px-m6q7-hv4p

Insufficiently protected credentials in Siemens SIMATIC Drive Controller family

MEDIUM 42

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1CRITICAL 9.3 Local No auth No interaction EPSS 0.00241 Published 2022-10-11 Fixed in V2.9.2, V21.9 +3 CWE-522

TI-2021-15267 CVE-2021-37205 · GHSA-78f8-w6wx-97fh

Memory leak in Siemens SIMATIC Drive Controller family

MEDIUM 42

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2022-02-09 Fixed in V2.3.6 CWE-401

TI-2021-15266 CVE-2021-37204 · GHSA-mw3j-f4pg-723r

A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…

MEDIUM 43

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2022-02-09 Fixed in V2.9.2, V21.9 +3 CWE-672

TI-2021-15247 CVE-2021-37185 · GHSA-pwf7-gchp-6gf8

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >=…

MEDIUM 43

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0206 Published 2022-02-09 Fixed in V2.3.6 CWE-672

Vulnerabilities

Filters