Siemens

Simatic S7-1500 Software Controller Firmware

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-46156

  • EPSS 0.04%
  • Published 12.12.2023 12:15:13
  • Last modified 21.11.2024 08:27:59

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.

7.5

CVE-2023-28831

  • EPSS 0.43%
  • Published 12.09.2023 10:15:27
  • Last modified 18.08.2025 14:15:26

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an unauthenticated remote atta...

7.5

CVE-2021-40365

  • EPSS 0.12%
  • Published 13.12.2022 16:15:14
  • Last modified 21.11.2024 06:23:57

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

4.9

CVE-2021-44693

  • EPSS 0.09%
  • Published 13.12.2022 16:15:14
  • Last modified 21.11.2024 06:31:23

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

5.5

CVE-2021-44694

  • EPSS 0.09%
  • Published 13.12.2022 16:15:14
  • Last modified 21.11.2024 06:31:23

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

4.9

CVE-2021-44695

  • EPSS 0.08%
  • Published 13.12.2022 16:15:14
  • Last modified 21.11.2024 06:31:24

Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.

7.5

CVE-2020-15796

  • EPSS 1.17%
  • Published 14.12.2020 21:15:19
  • Last modified 21.11.2024 05:06:11

A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. SIPLUS variants) (V20.8), SIMATIC S7-1500 Software Controller (V20.8). The web server of the affected products contains a vulnerability that could allow a remote attacker ...

6.5

CVE-2017-2680

  • EPSS 2.34%
  • Published 11.05.2017 01:29:05
  • Last modified 20.04.2025 01:37:25

Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment (Layer 2). Human interaction is required to recover the systems. PROFIBUS interfaces are not affected.