Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Vendor: Siemens Component: Simatic S7-1500 Firmware Clear all filters
TI-2020-07009 CVE-2020-8744 · GHSA-4pp9-pcmj-qjgw

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40…

Priority LOW 34

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Intel(R) SPS versions before E3_05.01.04.200 may allow a privileg…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00362 Published 2020-11-12 No fix listed CWE-665
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx

Out-of-bounds read in Siemens SIMATIC CP 1604

Priority MEDIUM 42

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01401 Published 2019-04-17 Fixed in V3.3, V3.2.16 +13 CWE-125
TI-2018-11879 CVE-2018-16559 · GHSA-f6v4-p9wf-p829

Improper input validation in Siemens SIMATIC S7-1500 CPU

Priority LOW 37

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2019-04-17 No fix listed CWE-20
TI-2018-11878 CVE-2018-16558 · GHSA-fc72-f69r-qvh3

Improper input validation in Siemens SIMATIC S7-1500 CPU

Priority LOW 37

A vulnerability has been identified in SIMATIC S7-1500 CPU (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 CPU (All versions <= V1.8.5).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2019-04-17 No fix listed CWE-20
TI-2018-10016 CVE-2018-13805 · GHSA-mxvx-9h7h-6vxh

Uncontrolled resource consumption in Siemens SIMATIC ET 200SP Open Controller

Priority LOW 36

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (All versions >= V2.0 and < V2.1.6), SIMATIC S7-1500 Software Controller (All versions >= V2.0 and < V2.5), SIMATIC S7-1500 incl.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01578 Published 2018-10-10 No fix listed CWE-400
TI-2018-02664 CVE-2018-3639

Observable discrepancy in Intel Multiple

Priority MEDIUM 59

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an atta…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.60421 Published 2018-05-22 Partial fix CWE-203
TI-2018-03420 CVE-2018-4843 · GHSA-2cg6-w8mm-22rg

Improper input validation in Siemens SIMATIC S7-400 CPU 414-3 PN/DP V7

Priority LOW 30

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions < V7.0.3), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions < V7.0.3), SIM…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00543 Published 2018-03-20 Fixed in V7.0.3, V3.3 +6 CWE-20