Simatic S7 1200 Cpu 12 1212C Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-30694 MEDIUM PATCH This Month

The login endpoint /FormLogin in affected web services does not apply proper origin checking. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

CSRF Simatic S7 1500 Software Controller Simatic S7 Plcsim Advanced Simatic Wincc Runtime 6Es7154 8Fb01 0Ab0 Firmware +109

NVD

CVSS 3.1

6.5

EPSS

0.3%

CVE-2022-38465 HIGH This Week

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc2 Firmware Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc Firmware Simatic Drive Controller Cpu 1504D Tf Firmware Simatic Drive Controller Cpu 1507D Tf Firmware +41

NVD

CVSS 3.1

7.8

EPSS

0.2%

CVE-2022-30694

EPSS 0% CVSS 6.5

MEDIUM PATCH This Month

CSRF Simatic S7 1500 Software Controller Simatic S7 Plcsim Advanced +111

NVD

CVE-2022-38465

EPSS 0% CVSS 7.8

HIGH This Week

Information Disclosure Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc2 Firmware Simatic Et 200 Sp Open Controller Cpu 1515Sp Pc Firmware +43

NVD