Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaAlta (7.5)1.7%—Siemens Sinumerik 840d SL FirmwareSiemens Simatic S7-300 CPU 312 FirmwareSiemens Simatic S7-300 CPU 314 FirmwareSiemens Simatic S7-300 CPU 315-2 DP Firmware+812/11/202017/6/2026
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold…
ModificadaMedia (6.5)0.72%—Siemens Simatic S7-300 CPU 312 FirmwareSiemens Simatic S7-300 CPU 314 FirmwareSiemens Simatic S7-300 CPU 315-2 DP FirmwareSiemens Simatic S7-300 CPU 315-2 PN Firmware+109/9/202017/6/2026
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC S7-400 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions), SINUMERIK 840D sl (All versions). The authentication protocol between a client and…
ModificadaAlta (7.5)1.7%—Siemens Simatic S7-300 CPU FirmwareSiemens Simatic S7-300 CPU 312 IFM FirmwareSiemens Simatic S7-300 CPU 313 FirmwareSiemens Simatic S7-300 CPU 314 Firmware+810/3/202017/6/2026
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC TDC CP51M1 (All versions < V1.1.8), SIMATIC TDC CPU555 (All versions < V1.1.1), SINUMERIK 840D sl (All versions < V4.8.6), SINUMERIK 840D sl (All versions < V4.94).…
ModificadaAlta (7.5)2.1%—Siemens DK Standard Ethernet Controller FirmwareSiemens Ek-ertec 200 FirmwareSiemens Ek-ertec 200p FirmwareSiemens Simatic CFU PA Firmware+6210/10/201917/6/2026
Affected devices improperly handle large amounts of specially crafted UDP packets. This could allow an unauthenticated remote attacker to trigger a denial of service condition.
ModificadaAlta (7.5)1.4%—Siemens Cp1604 FirmwareSiemens Cp1616 FirmwareSiemens DK Standard Ethernet Controller FirmwareSiemens Ek-ertec 200 Firmware+3610/10/201917/6/2026
An attacker with network access to an affected product may cause a denial of service condition by breaking the real-time synchronization (IRT) of the affected installation.
Orbitaley — Vulnerabilidades