Simatic S7 1500T Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-0160 Apr 07, 22:55 HIGH POC KEV PATCH THREAT Act Now

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

Buffer Overflow Information Disclosure OpenSSL Broadcom Debian +33

NVD Exploit-DB GitHub VulDB

CVSS 3.1

7.5

EPSS

94.5%

Threat

7.3

CVE-2019-6575 Apr 17, 14:29 HIGH This Week

A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Siemens Sinec Nms Telecontrol Server Basic Simatic S7 1500 Firmware +24

NVD VulDB

CVSS 3.1

7.5

EPSS

1.1%

CVE-2019-6568 Apr 17, 14:29 HIGH This Week

The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Siemens Sinamics S210 Firmware +52

NVD

CVSS 3.1

7.5

EPSS

1.4%

CVE-2014-0160

EPSS 94% 7.3 CVSS 7.5

HIGH POC KEV PATCH THREAT Act Now

Buffer Overflow Information Disclosure OpenSSL +35

NVD Exploit-DB GitHub VulDB

CVE-2019-6575

EPSS 1% CVSS 7.5

HIGH This Week

Denial Of Service Siemens Sinec Nms +26

NVD VulDB

CVE-2019-6568

EPSS 1% CVSS 7.5

HIGH This Week

Buffer Overflow Denial Of Service Information Disclosure +54

NVD