Simatic Ipc127E Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-33626 HIGH This Week

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Insydeh2o Ruggedcom Apr1808 Firmware Simatic Field Pg M5 Firmware Simatic Field Pg M6 Firmware +13

NVD

CVSS 3.1

7.8

EPSS

0.3%

CVE-2020-8745 MEDIUM PATCH This Month

Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , Intel(R) TXE versions before 3.1.80. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Privilege Escalation Intel Converged Security And Manageability Engine Trusted Execution Technology Simatic Drive Controller Firmware +19

NVD

CVSS 3.1

6.8

EPSS

0.4%

CVE-2021-33626

EPSS 0% CVSS 7.8

HIGH This Week

RCE Insydeh2o Ruggedcom Apr1808 Firmware +15

NVD

CVE-2020-8745

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

Privilege Escalation Intel Converged Security And Manageability Engine +21

NVD