Specially crafted packets sent to port 161/udp could cause a denial of service condition. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Denial Of Service
Simatic S7 200 Firmware
Simatic S7 400Pn V6 Firmware
Simatic S7 400H V6 Firmware
Simatic S7 400Pn Dp V7 Firmware
+34
NVD
CVSS 4.0
8.7
EPSS
5.3%
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Scalance Xb 200 Firmware
Scalance Xc 200 Firmware
Scalance Xp 200 Firmware
Scalance Xr300 Wg Firmware
+3
NVD
CVSS 3.1
8.8
EPSS
0.5%
Siemens LOGO!. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Siemens
Information Disclosure
Logo Soft Comfort
NVD
CVSS 3.0
5.9
EPSS
0.1%