6Es7314 6Eh04 0Ab0 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-30694 Nov 08, 11:15 MEDIUM PATCH This Month

The login endpoint /FormLogin in affected web services does not apply proper origin checking. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Siemens Simatic Wincc Runtime Simatic S7 1200 Cpu 1211C Firmware Simatic S7 1200 Cpu 1212C Firmware +110

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2019-10953 Apr 17, 15:29 HIGH This Week

ABB, Phoenix Contact, Schneider Electric, Siemens, WAGO - Programmable Logic Controllers, multiple versions. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Abb Schneider Electric Modicon M221 Firmware +11

NVD VulDB GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2022-30694

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

CSRF Siemens Simatic Wincc Runtime +112

NVD

CVE-2019-10953

EPSS 0% CVSS 7.5

HIGH This Week

Denial Of Service Siemens Abb +13

NVD VulDB GitHub