Vulnerabilities

TI-2022-09211 CVE-2022-25622 · GHSA-pgxc-2q22-7c2f

Uncontrolled resource consumption in Siemens SIMATIC CFU DIQ

MEDIUM 41

The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the minimum TCP-Header length is less than defined.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00901 Published 2022-04-12 Fixed in V2.0.0, V3.2.19 +15 CWE-400

TI-2019-08156 CVE-2019-10936 · GHSA-vr9v-38cg-fjfp

Uncontrolled resource consumption in Siemens Development/Evaluation Kits for PROFINET IO…

MEDIUM 43

Affected devices improperly handle large amounts of specially crafted UDP packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02065 Published 2019-10-10 Fixed in V1.2.0, V4.3.0 +16 CWE-400

TI-2016-02010 CVE-2016-2201 · GHSA-4597-h46x-2mwj

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a…

LOW 29

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to bypass a replay protection mechanism via packets on TCP port 102.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.02917 Published 2016-02-08 No fix listed CWE-20

TI-2016-02009 CVE-2016-2200 · GHSA-4m2w-vcxc-r9wm

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial…

MEDIUM 42

Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remote attackers to cause a denial of service (STOP mode transition) via crafted packets on TCP port 102.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06371 Published 2016-02-08 No fix listed CWE-20

TI-2014-04151 CVE-2014-5074 · GHSA-64h7-xqm5-vw78

Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to…

MEDIUM 43

Siemens SIMATIC S7-1500 CPU devices with firmware before 1.6 allow remote attackers to cause a denial of service (device restart and STOP transition) via crafted TCP packets.

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.09696 Published 2014-08-17 No fix listed

TI-2014-01791 CVE-2014-2259 · GHSA-pg4v-93mf-mmc6

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers…

MEDIUM 41

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04456 Published 2014-03-16 No fix listed

TI-2014-01789 CVE-2014-2257 · GHSA-pj6m-28cc-c3ww

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers…

MEDIUM 40

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted ISO-TSAP packets.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03464 Published 2014-03-16 No fix listed

TI-2014-01787 CVE-2014-2255 · GHSA-x4gj-g8mq-9cxr

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers…

MEDIUM 41

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTP packets.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.04456 Published 2014-03-16 No fix listed

TI-2014-01785 CVE-2014-2253 · GHSA-jmv9-4c44-h234

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers…

LOW 29

Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted Profinet packets.

CVSS 2.0MEDIUM 6.1 Adjacent network No auth Interaction — EPSS 0.0101 Published 2014-03-16 No fix listed

TI-2014-01783 CVE-2014-2251 · GHSA-gc2g-5cgv-c5vh

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware…

MEDIUM 41

The random-number generator on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 does not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic protection mechanisms…

CVSS 2.0HIGH 8.3 Network No auth Interaction — EPSS 0.02744 Published 2014-03-16 No fix listed

TI-2014-01781 CVE-2014-2249 · GHSA-xgc5-jhvr-xfh8

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC…

LOW 29

Cross-site request forgery (CSRF) vulnerability on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 and SIMATIC S7-1200 CPU PLC devices with firmware before 4.0 allows remote attackers to hijack the aut…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01344 Published 2014-03-16 No fix listed CWE-352

TI-2014-01780 CVE-2014-2248 · GHSA-m24g-7p8c-8h8f

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU…

LOW 24

Open redirect vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02204 Published 2014-03-16 No fix listed

TI-2014-01779 CVE-2014-2247 · GHSA-r54v-r859-38g3

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before…

LOW 31

The integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject headers via unspecified vectors.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02417 Published 2014-03-16 No fix listed

TI-2014-01778 CVE-2014-2246 · GHSA-whhc-p8jw-c4g3

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC…

LOW 24

Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02168 Published 2014-03-16 No fix listed CWE-79

Vulnerabilities

Filters