Siemens
Siemens Simatic S7-1500 CPU 1515-2 PN Firmware: vulnerabilidades y CVE
Siemens Simatic S7-1500 CPU 1515-2 PN Firmware tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-46156 | Alta (7.5) | 1.2% | — | 12 dic 2023 | Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations. |
| CVE-2023-28831 | Alta (8.7) | 1.1% | — | 12 sept 2023 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during certificate validation. This could allow an… |
| CVE-2022-38773 | Media (6.8) | 0.29% | — | 10 ene 2023 | Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on the device can not be validated during load-time. An attacker with physical access to the device… |
| CVE-2021-44695 | Alta (7.5) | 0.74% | — | 13 dic 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device. |
| CVE-2021-44694 | Alta (7.5) | 0.63% | — | 13 dic 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device. |
| CVE-2021-44693 | Alta (7.5) | 0.74% | — | 13 dic 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device. |
| CVE-2021-40365 | Alta (7.5) | 0.90% | — | 13 dic 2022 | Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device. |
| CVE-2022-30694 | Baja (3.5) | 0.31% | — | 8 nov 2022 | The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery… |
| CVE-2019-19300 | Alta (7.5) | 1.7% | — | 14 abr 2020 | A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE530S COATED, SIDOOR… |
| CVE-2019-19281 | Alta (7.5) | 1.7% | — | 10 mar 2020 | A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS… |