Specially crafted packets sent to port 161/udp could cause a denial of service condition. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Denial Of Service
Siemens
Simatic S7 1500 Firmware
Simatic S7 1200 Firmware
Simatic Et 200Al Firmware
+35
NVD
CVSS 4.0
8.7
EPSS
5.3%
After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Siemens
Scalance Xb 200 Firmware
Scalance Xc 200 Firmware
Scalance Xp 200 Firmware
+4
NVD
CVSS 3.1
8.8
EPSS
0.5%