Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: Siemens Component: Tim 1531 Irc Firmware Clear all filters
TI-2022-21502 CVE-2022-43768 · GHSA-wxpj-f564-69x8

Resource allocation without limits in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-770
TI-2022-21471 CVE-2022-43716 · GHSA-m73h-5f8p-xrgj

Use after free in Siemens SIMATIC CP 1242-7 V2

Priority MEDIUM 41

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (6GK7242-7KX31-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 (6GK7243-1BX30-0XE0) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00954 Published 2023-04-11 Fixed in V3.4.29, V2.3 +2 CWE-416
TI-2021-20216 CVE-2021-44695 · GHSA-7hvh-r5jg-mrp9

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00766 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1286
TI-2021-20215 CVE-2021-44694 · GHSA-vf8v-frr6-xcjc

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority LOW 34

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00658 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-1287
TI-2021-17434 CVE-2021-40365 · GHSA-6x86-2ph3-crc4

Improper input validation in Siemens SIMATIC Drive Controller CPU 1504D TF

Priority MEDIUM 41

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00929 Published 2022-12-13 Fixed in V2.9.7, V21.9.7 +4 CWE-20
TI-2021-15267 CVE-2021-37205 · GHSA-78f8-w6wx-97fh

Memory leak in Siemens SIMATIC Drive Controller family

Priority MEDIUM 42

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2022-02-09 Fixed in V2.3.6 CWE-401
TI-2021-15266 CVE-2021-37204 · GHSA-mw3j-f4pg-723r

A vulnerability has been identified in SIMATIC Drive Controller family (All versions <…

Priority MEDIUM 43

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02181 Published 2022-02-09 Fixed in V2.9.2, V21.9 +3 CWE-672
TI-2020-17226 CVE-2020-28397 · GHSA-wg3f-fv3w-mw54

Incorrect authorization in Siemens SIMATIC Drive Controller family

Priority LOW 25

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00752 Published 2021-08-10 Fixed in V2.9.2, V21.9 CWE-863
TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

Priority HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476
TI-2019-04622 CVE-2019-6568 · GHSA-gm8r-2vc4-2wvx

Out-of-bounds read in Siemens SIMATIC CP 1604

Priority MEDIUM 42

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01401 Published 2019-04-17 Fixed in V3.3, V3.2.16 +13 CWE-125
TI-2018-10027 CVE-2018-13816 · GHSA-vx39-fw57-q8mc

Improper access control in Siemens TIM 1531 IRC

Priority MEDIUM 48

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0).

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02796 Published 2018-12-12 No fix listed CWE-284
TI-2018-03418 CVE-2018-4841 · GHSA-vj79-837c-gmf4

Improper authentication in Siemens TIM 1531 IRC

Priority MEDIUM 50

A vulnerability has been identified in TIM 1531 IRC (All versions < V1.1).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04726 Published 2018-03-29 Fixed in V1.1 CWE-303