Priority MEDIUM 45
The Telnet service of the SIMATIC HMI Comfort Panels system component in affected products does not require authentication, which may allow a remote attacker to gain access to the device if the service is enabled.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01678 · Published 2021-06-28 · No fix listed CWE-306
Priority MEDIUM 45
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or executi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01545 · Published 2021-06-15 · No fix listed CWE-20
Priority MEDIUM 42
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01826 · Published 2021-05-12 · No fix listed CWE-401
Priority MEDIUM 44
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02604 · Published 2021-05-12 · No fix listed CWE-400
Priority MEDIUM 54
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02608 · Published 2021-05-12 · No fix listed CWE-788
Priority MEDIUM 42
A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01826 · Published 2021-05-12 · No fix listed CWE-770
Priority MEDIUM 57
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05262 · Published 2021-02-09 · No fix listed CWE-306
Priority LOW 36
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01401 · Published 2019-10-10 · Fixed in V4.5.0, V5.2.1 +8 CWE-400
Priority MEDIUM 43
Affected devices improperly handle large amounts of specially crafted UDP packets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02065 · Published 2019-10-10 · Fixed in V1.2.0, V4.3.0 +16 CWE-400
Priority MEDIUM 42
The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01401 · Published 2019-04-17 · Fixed in V3.3, V3.2.16 +13 CWE-125
Priority LOW 34
Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2).
CVSS 4.0HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.01149 · Published 2017-05-11 · Fixed in V01.01.01, V3.0 +35 CWE-400
THREATIST.IORead the docs